@aglyn/plugins-commerce 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/server/billing-webhook.js

@@ -15,9 +15,12 @@
  * limitations under the License.
  */ import { _ as _extends } from "@swc/helpers/_/_extends";
 import * as Aglyn from "@aglyn/aglyn/server";
-import { findUserByUidAcrossPools, firebaseAdmin, getOrgForHost, meterHostEmail, notifyHostManagers, notifyRiskEvent, raiseOperatorAlert, renderHostEmailWithTokens, clearConnectPayoutFailure, recordConnectPayoutFailure, syncConnectAccountStatus, updateExisting, hostSendingIdentity } from "@aglyn/tenant-data-admin";
+import { findUserByUidAcrossPools, firebaseAdmin, getOrgForHost, meterHostEmail, notifyHostManagers, notifyRiskEvent, raiseOperatorAlert, renderHostEmailWithTokens, updateExisting, hostSendingIdentity } from "@aglyn/tenant-data-admin";
+import { paymentProvider } from "@aglyn/tenant-data-admin/server/payment-provider";
 import { captureHostContact } from "@aglyn/tenant-runtime";
 import { formatOperatorAlertAmount } from "@aglyn/aglyn/app-utils/operator-alerts";
+import { resolveSiteTimeZone } from "@aglyn/aglyn/app-utils/collection-entry-date";
+import { resolveHostToken } from "@aglyn/aglyn/app-utils/host-tokens";
 import { COMMERCE_CHARGEBACK_UNROUTABLE, COMMERCE_FEE_REPRICE_REFUSED, COMMERCE_SELLER_SHARE_NOT_REVERSED, COMMERCE_TAX_NOT_REVERSED } from "../constants/operator-alerts.js";
 import { createHmac } from "crypto";
 import { isEmailConfigured, sendEmail } from "@aglyn/shared-util-email";
@@ -104,11 +107,17 @@ import { enqueueSupplierDelivery } from "./supplier-outbox.js";
         }
         if (keys.length) {
             const remaining = await hostRef.collection('licenseKeys').where('productId', '==', productId).where('assignedAtMs', '==', null).limit(6).get();
-            if (remaining.size < 5) {
+            // Once per CROSSING (AGL-3432), as the low-stock alert is: this sale
+            // took the pool below five, or took its last key. Every later sale in a
+            // low pool stays quiet rather than repeating the same notice.
+            const left = remaining.size;
+            const before = left + keys.length;
+            if (left < 5 && before >= 5 || left === 0) {
+                const productName = String(await hostRef.collection('products').doc(productId).get().then((snapshot)=>snapshot.get('name')).catch(()=>'') || 'a product');
                 void notifyHostManagers(hostId, {
                     type: 'content.lowStock',
-                    title: 'License key pool running low',
-                    body: `${remaining.size} keys left`,
+                    title: left === 0 ? `License keys used up — ${productName}` : `License keys running low — ${productName}`,
+                    body: left === 0 ? `The last license key for ${productName} on {site} was just ` + 'assigned. A buyer who orders it now gets no key; add keys to ' + 'its pool under Products.' : `Only ${left} license key${left === 1 ? ' is' : 's are'} left ` + `for ${productName} on {site}. Every sale of it takes its ` + 'keys from this pool; add more under Products before it runs out.',
                     link: `/${hostId}/products`
                 });
             }
@@ -293,6 +302,25 @@ async function findOrderForDispute(paymentIntentId) {
         }
     });
 }
+/**
+ * A site as an operator alert names it: its name and id, else the id alone
+ * (AGL-3432) — staff see faults from every org, and a bare host id has to be
+ * looked up before anyone can act. One host read, taken only when a money
+ * fault is being reported; a read that fails answers the id.
+ */ async function operatorSiteLabel(hostId) {
+    if (!hostId) return 'unknown';
+    try {
+        var _data;
+        const host = (_data = (await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).get()).data()) != null ? _data : {};
+        const name = [
+            host['displayName'],
+            host['subdomain']
+        ].find((value)=>typeof value === 'string' && value.trim() !== '');
+        return name ? `${name.trim()} (${hostId})` : hostId;
+    } catch (unused) {
+        return hostId;
+    }
+}
 /**
  * Tells the operator that a subscription cycle's sales tax stayed with the
  * merchant (AGL-3377): the platform files and remits it, so every one of
@@ -304,6 +332,7 @@ async function findOrderForDispute(paymentIntentId) {
         context: {
             invoiceId: input.invoiceId,
             hostId: input.hostId,
+            site: await operatorSiteLabel(input.hostId),
             amount: input.taxCents === undefined ? 'An unknown amount' : formatOperatorAlertAmount(input.taxCents),
             reason: input.reason
         }
@@ -573,11 +602,11 @@ async function findOrderForDispute(paymentIntentId) {
  * fulfilment path are untouched; what changes is that no FURTHER cycle is
  * billed.
  *
- * `cancel_at_period_end` rather than an outright cancel, for two reasons that
- * both matter: the subscriber keeps the period they just paid for, and the
- * flag is REVERSIBLE — the merchant has a full cycle to restore their Aglyn
- * plan before anything is actually lost. An immediate cancel would take
- * service away from a shopper who did nothing wrong.
+ * `cancel_at_period_end` rather than an outright cancel: the subscriber keeps
+ * the period they just paid for. An immediate cancel would take service away
+ * from a shopper who did nothing wrong. The flag is reversible in Stripe, but
+ * nothing here clears it when the merchant's plan comes back, so the notice
+ * says that restoring the plan does not restart the subscription (AGL-3432).
  *
  * ## Once-only
  *
@@ -587,7 +616,8 @@ async function findOrderForDispute(paymentIntentId) {
  * subscription billing forever with the books saying it had been stopped. The
  * `Idempotency-Key` covers the window where the claim is written and the
  * response never arrives.
- */ async function stopLapsedStorefrontSubscription(hostId, subscriptionId, subscriptionRef) {
+ */ async function stopLapsedStorefrontSubscription(hostId, subscriptionId, subscriptionRef, /** Who subscribed to what, and the workspace, for the merchant's notice. */ notice) {
+    var _ref, _ref1;
     const stripeKey = process.env.STRIPE_SECRET_KEY;
     if (!stripeKey) {
         console.error('Lapsed storefront subscription not stopped: STRIPE_SECRET_KEY is not set (AGL-2071)', {
@@ -648,10 +678,29 @@ async function findOrderForDispute(paymentIntentId) {
     }, {
         merge: true
     }).catch(()=>undefined);
+    // When it ends, from Stripe's own answer: `cancel_at` is the period end the
+    // flag just scheduled. Told as a date in the site's zone, and left out when
+    // Stripe did not say.
+    const stopped = await response.json().catch(()=>null);
+    const endsAtSeconds = Number((_ref = (_ref1 = stopped == null ? void 0 : stopped.cancel_at) != null ? _ref1 : stopped == null ? void 0 : stopped.current_period_end) != null ? _ref : 0);
+    let endsOn = '';
+    if (endsAtSeconds > 0) {
+        const host = await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).get().then((snapshot)=>snapshot.data()).catch(()=>undefined);
+        endsOn = new Date(endsAtSeconds * 1000).toLocaleDateString('en-US', {
+            month: 'long',
+            day: 'numeric',
+            year: 'numeric',
+            timeZone: resolveSiteTimeZone(notice.org, host)
+        });
+    }
+    const subscriber = notice.subscriberEmail ? `${notice.subscriberEmail}'s subscription` : 'A subscription';
     void notifyHostManagers(hostId, {
         type: 'content.order',
-        title: 'A subscription stopped renewing — your plan no longer includes storefront subscriptions',
-        body: 'This subscriber keeps the period they have already paid for. ' + 'Restore your plan before it ends to keep billing them.',
+        title: 'A subscription on {site} stopped renewing',
+        // Restoring the plan does NOT restart it (AGL-3432): nothing clears
+        // Stripe's `cancel_at_period_end` when the plan comes back, so the notice
+        // promises no such remedy.
+        body: `${subscriber} to ${notice.productName} on {site} will end` + `${endsOn ? ` on ${endsOn}` : ' at the end of its paid period'} ` + 'instead of renewing, because your plan no longer includes ' + 'storefront subscriptions. The subscriber keeps the period they ' + 'already paid for. Restoring your plan does not restart this ' + 'subscription.',
         link: `/${hostId}/products`
     });
 }
@@ -738,11 +787,13 @@ async function findOrderForDispute(paymentIntentId) {
         }
         const refusal = await response.json().catch(()=>null);
         console.error(`Stripe refused the fee re-price for ${subscriptionId} (AGL-2289)`, refusal);
+        const repriceHostId = (_ref = (_subscriptionRef_parent_parent = subscriptionRef.parent.parent) == null ? void 0 : _subscriptionRef_parent_parent.id) != null ? _ref : '';
         await raiseOperatorAlert(COMMERCE_FEE_REPRICE_REFUSED, {
             dedupeKey: `${subscriptionId}:${desiredFeePct}`,
             context: {
                 subject: `subscription ${subscriptionId}`,
-                hostId: (_ref = (_subscriptionRef_parent_parent = subscriptionRef.parent.parent) == null ? void 0 : _subscriptionRef_parent_parent.id) != null ? _ref : '',
+                hostId: repriceHostId,
+                site: await operatorSiteLabel(repriceHostId),
                 reason: `Stripe refused to set the fee to ${desiredFeePct}% (${(_ref1 = refusal == null ? void 0 : (_refusal_error = refusal.error) == null ? void 0 : _refusal_error.message) != null ? _ref1 : `HTTP ${response.status}`})`
             }
         });
@@ -764,6 +815,7 @@ async function findOrderForDispute(paymentIntentId) {
         context: {
             subject: `invoice ${invoiceId}`,
             hostId,
+            site: await operatorSiteLabel(hostId),
             reason
         }
     });
@@ -1603,14 +1655,15 @@ async function findOrderForDispute(paymentIntentId) {
  * Tells the operator the platform is out a lost dispute's principal because
  * the merchant's share could not be pulled back (AGL-3377). Once per dispute.
  */ async function reportSellerShareNotReversed(orderRef, disputeId, principalCents, reason) {
-    var _ref;
-    var _orderRef_parent_parent;
+    var _ref, _ref1;
+    var _orderRef_parent_parent, _orderRef_parent_parent1;
     await raiseOperatorAlert(COMMERCE_SELLER_SHARE_NOT_REVERSED, {
         dedupeKey: disputeId,
         context: {
             disputeId,
             orderId: orderRef.id,
             hostId: (_ref = (_orderRef_parent_parent = orderRef.parent.parent) == null ? void 0 : _orderRef_parent_parent.id) != null ? _ref : '',
+            site: await operatorSiteLabel((_ref1 = (_orderRef_parent_parent1 = orderRef.parent.parent) == null ? void 0 : _orderRef_parent_parent1.id) != null ? _ref1 : ''),
             amount: formatOperatorAlertAmount(principalCents),
             reason
         }
@@ -1633,59 +1686,25 @@ async function findOrderForDispute(paymentIntentId) {
  * `object.metadata.type`, exactly as the inline route sections did.
  */ export const commerceBillingWebhookHandler = async ({ type, object, event, requestHost })=>{
     var _object_metadata, _object_metadata1, _object_metadata2, _object_metadata3, _object_metadata4;
-    // Connect readiness, kept fresh (AGL-1997). Every commerce money route —
+    // THE MERCHANT'S PAYMENT ACCOUNT CHANGED. Every commerce money route —
     // checkout, cart checkout, draft orders, reservations, POS — gates the sale
-    // on the CACHED `stripeChargesEnabled` written by the connect route. Nothing
-    // refreshed it but the merchant reopening that route, so a merchant Stripe
-    // later restricted kept selling on a stale `true` and the shopper met the
-    // failure at payment time.
+    // on the readiness the connect route CACHED on the merchant's profile
+    // (AGL-1997), and nothing refreshed it but the merchant reopening that
+    // route: a merchant the provider later restricted kept selling on a stale
+    // `true`, and the shopper met the failure at payment time. A payout or
+    // transfer that never landed is recorded against the same profile, and a
+    // later one that did retires the warning.
     //
-    // FIRST and with an early return: this event shares nothing with the order
-    // sections below, and returning here keeps it out of every `metadata.type`
-    // test. `syncConnectAccountStatus` mirrors current state, so a redelivery is
-    // harmless.
-    // `event.livemode`, not `object.livemode` (AGL-2471): the Stripe Account
-    // object carries no `livemode` field, but the event announcing it does, and
-    // that is what lets a linkage whose mode was never recorded heal itself
-    // instead of staying refused forever.
-    if (type === 'account.updated') {
-        await syncConnectAccountStatus('profiles', object, event == null ? void 0 : event.livemode);
-        return;
-    }
-    // A PAYOUT OR TRANSFER THAT NEVER LANDED.
-    //
-    // Placed beside `account.updated` because it is the same kind of event —
-    // account-level, nothing to do with the `metadata.type` order sections
-    // below — and returns for the same reason.
-    //
-    // `payout.failed` is the CONNECTED account's balance failing to reach its
-    // bank, so the account id is `event.account`: the Payout object's own
-    // `destination` names the bank, not the Connect account. `transfer.failed`
-    // is the platform's balance failing to reach the connected account, a
-    // platform event whose `destination` IS the account.
-    //
-    // Recorded and surfaced, never retried: Stripe runs its own retry schedule
-    // and a second transfer against an account that just refused one is how a
-    // duplicate lands.
-    if (type === 'payout.failed' || type === 'transfer.failed') {
-        var _ref, _ref1, _ref2;
-        var _object_destination;
-        const failedAccountId = type === 'payout.failed' ? String((_ref = event == null ? void 0 : event.account) != null ? _ref : '') : String((_ref1 = (_ref2 = object == null ? void 0 : (_object_destination = object.destination) == null ? void 0 : _object_destination.id) != null ? _ref2 : object == null ? void 0 : object.destination) != null ? _ref1 : '');
-        await recordConnectPayoutFailure('profiles', {
-            kind: type === 'payout.failed' ? 'payout' : 'transfer',
-            object,
-            accountId: failedAccountId,
-            livemode: event == null ? void 0 : event.livemode
-        });
-        return;
-    }
-    // A later success retires the warning the card shows. The history in
-    // `connectPayoutFailures` is kept — "has this account failed before" is what
-    // that record exists to answer — but a stale warning on a resolved problem
-    // trains people to ignore the surface.
-    if (type === 'payout.paid') {
-        var _ref3;
-        await clearConnectPayoutFailure('profiles', String((_ref3 = event == null ? void 0 : event.account) != null ? _ref3 : ''));
+    // The payment provider reads the event — which ones describe an account,
+    // and where each keeps its id — and mirrors current state, so a redelivery
+    // is harmless. FIRST and with an early return: these events share nothing
+    // with the order sections below, and returning here keeps them out of
+    // every `metadata.type` test.
+    if (await paymentProvider().applyAccountEvent('profiles', {
+        type,
+        object,
+        event
+    })) {
         return;
     }
     // A DEAD SESSION GIVES ITS RESERVATIONS BACK (AGL-2453).
@@ -1706,9 +1725,9 @@ async function findOrderForDispute(paymentIntentId) {
     // Same early return as `account.updated`: this event carries no order and
     // shares nothing with the `checkout.session.completed` sections below.
     if (type === 'checkout.session.expired') {
-        var _ref4, _ref5, _ref6, _ref7, _ref8, _ref9, _ref10, _ref11;
+        var _ref, _ref1, _ref2, _ref3, _ref4, _ref5, _ref6, _ref7;
         var _object_metadata5, _object_metadata6, _object_metadata7, _object_metadata8, _object_metadata9, _object_metadata10, _object_metadata11, _object_metadata12;
-        const expiredHostId = String((_ref4 = object == null ? void 0 : (_object_metadata5 = object.metadata) == null ? void 0 : _object_metadata5.hostId) != null ? _ref4 : '');
+        const expiredHostId = String((_ref = object == null ? void 0 : (_object_metadata5 = object.metadata) == null ? void 0 : _object_metadata5.hostId) != null ? _ref : '');
         if (!expiredHostId) return;
         const expiredHostRef = firebaseAdmin.app().firestore().collection('hosts').doc(expiredHostId);
         // THE UNITS COME BACK FIRST (AGL-2356), because they are the reservation a
@@ -1722,14 +1741,14 @@ async function findOrderForDispute(paymentIntentId) {
         // fire at all unless the endpoint subscribes to the event. What it buys is
         // that the shelf and the storefront agree PROMPTLY, which is the difference
         // between a hold a merchant can reason about and one they cannot.
-        await releaseStockHold(expiredHostRef, String((_ref5 = object == null ? void 0 : (_object_metadata6 = object.metadata) == null ? void 0 : _object_metadata6.stockHoldKey) != null ? _ref5 : ''));
-        const couponHoldKey = String((_ref6 = object == null ? void 0 : (_object_metadata7 = object.metadata) == null ? void 0 : _object_metadata7.couponHoldKey) != null ? _ref6 : '');
-        const couponCode = String((_ref7 = object == null ? void 0 : (_object_metadata8 = object.metadata) == null ? void 0 : _object_metadata8.couponCode) != null ? _ref7 : '');
+        await releaseStockHold(expiredHostRef, String((_ref1 = object == null ? void 0 : (_object_metadata6 = object.metadata) == null ? void 0 : _object_metadata6.stockHoldKey) != null ? _ref1 : ''));
+        const couponHoldKey = String((_ref2 = object == null ? void 0 : (_object_metadata7 = object.metadata) == null ? void 0 : _object_metadata7.couponHoldKey) != null ? _ref2 : '');
+        const couponCode = String((_ref3 = object == null ? void 0 : (_object_metadata8 = object.metadata) == null ? void 0 : _object_metadata8.couponCode) != null ? _ref3 : '');
         if (couponHoldKey && couponCode) {
             await releasePromotionHold(expiredHostRef.collection('coupons').doc(couponCode), couponHoldKey);
         }
-        const discountHoldKey = String((_ref8 = object == null ? void 0 : (_object_metadata9 = object.metadata) == null ? void 0 : _object_metadata9.discountHoldKey) != null ? _ref8 : '');
-        const discountId = String((_ref9 = object == null ? void 0 : (_object_metadata10 = object.metadata) == null ? void 0 : _object_metadata10.discountId) != null ? _ref9 : '');
+        const discountHoldKey = String((_ref4 = object == null ? void 0 : (_object_metadata9 = object.metadata) == null ? void 0 : _object_metadata9.discountHoldKey) != null ? _ref4 : '');
+        const discountId = String((_ref5 = object == null ? void 0 : (_object_metadata10 = object.metadata) == null ? void 0 : _object_metadata10.discountId) != null ? _ref5 : '');
         if (discountHoldKey && discountId) {
             await releasePromotionHold(expiredHostRef.collection('discounts').doc(discountId), discountHoldKey);
         }
@@ -1737,8 +1756,8 @@ async function findOrderForDispute(paymentIntentId) {
         // event and AGL-2449 left it to the TTL alone. A shopper whose abandoned
         // checkout stands their own balance off for a day cannot be told why
         // either, and the release is the identical delete sentinel.
-        const giftCardHoldKey = String((_ref10 = object == null ? void 0 : (_object_metadata11 = object.metadata) == null ? void 0 : _object_metadata11.giftCardHoldKey) != null ? _ref10 : '');
-        const giftCardCode = String((_ref11 = object == null ? void 0 : (_object_metadata12 = object.metadata) == null ? void 0 : _object_metadata12.giftCardCode) != null ? _ref11 : '');
+        const giftCardHoldKey = String((_ref6 = object == null ? void 0 : (_object_metadata11 = object.metadata) == null ? void 0 : _object_metadata11.giftCardHoldKey) != null ? _ref6 : '');
+        const giftCardCode = String((_ref7 = object == null ? void 0 : (_object_metadata12 = object.metadata) == null ? void 0 : _object_metadata12.giftCardCode) != null ? _ref7 : '');
         if (giftCardHoldKey && giftCardCode) {
             await expiredHostRef.collection('giftCards').doc(giftCardCode).set({
                 holds: {
@@ -1791,9 +1810,9 @@ async function findOrderForDispute(paymentIntentId) {
             var _object_metadata14;
             const subHostId = object == null ? void 0 : (_object_metadata14 = object.metadata) == null ? void 0 : _object_metadata14.hostId;
             if (subHostId) {
-                var _ref12;
+                var _ref8;
                 await firebaseAdmin.app().firestore().collection('hosts').doc(String(subHostId)).collection('subscriptions').doc(String(object.id)).set({
-                    status: type === 'customer.subscription.deleted' ? 'canceled' : String((_ref12 = object == null ? void 0 : object.status) != null ? _ref12 : 'active'),
+                    status: type === 'customer.subscription.deleted' ? 'canceled' : String((_ref8 = object == null ? void 0 : object.status) != null ? _ref8 : 'active'),
                     currentPeriodEndMs: (object == null ? void 0 : object.current_period_end) ? object.current_period_end * 1000 : null
                 }, {
                     merge: true
@@ -1807,7 +1826,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata15;
         const { hostId, productId } = (_object_metadata15 = object.metadata) != null ? _object_metadata15 : {};
         if (hostId && productId) {
-            var _productForSnapshot_data, _ref13, _productForSnapshot_get, _subTotals_totalCents, _ref14;
+            var _productForSnapshot_data, _ref9, _productForSnapshot_get, _subTotals_totalCents, _productForSnapshot_get1, _ref10;
             var _object_metadata16, _liftedForSnapshot_subscription, _object_customer_details, _object_customer_details1, _object_customer_details2;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
@@ -1838,7 +1857,7 @@ async function findOrderForDispute(paymentIntentId) {
                 name: 'Product'
             });
             const soldVariant = ((_object_metadata16 = object.metadata) == null ? void 0 : _object_metadata16.variantId) ? liftedForSnapshot.variants.find((item)=>item.id === String(object.metadata.variantId)) : liftedForSnapshot.variants[0];
-            const variantOptions = Object.values((_ref13 = soldVariant == null ? void 0 : soldVariant.options) != null ? _ref13 : {});
+            const variantOptions = Object.values((_ref9 = soldVariant == null ? void 0 : soldVariant.options) != null ? _ref9 : {});
             const { lineItems: subLineItems, totals: subTotals } = CommerceModel.computeBuyNowOrder(object, _extends({
                 name: String((_productForSnapshot_get = productForSnapshot.get('name')) != null ? _productForSnapshot_get : 'Product')
             }, variantOptions.length ? {
@@ -1924,16 +1943,17 @@ async function findOrderForDispute(paymentIntentId) {
             });
             if (!recorded) return;
             const subscriptionCents = Number((_subTotals_totalCents = subTotals.totalCents) != null ? _subTotals_totalCents : 0);
-            void notifyHostManagers(String(hostId), _extends({
+            const subscriptionPrice = `$${(subscriptionCents / 100).toFixed(2)}${((_liftedForSnapshot_subscription = liftedForSnapshot.subscription) == null ? void 0 : _liftedForSnapshot_subscription.interval) ? `/${liftedForSnapshot.subscription.interval}` : ''}`;
+            const subscriberEmail = object == null ? void 0 : (_object_customer_details = object.customer_details) == null ? void 0 : _object_customer_details.email;
+            void notifyHostManagers(String(hostId), {
                 type: 'content.order',
                 // The amount rides the title exactly as the order notification's
                 // does (AGL-1732) — "New subscriber" alone never said what for.
-                title: `New subscriber — $${(subscriptionCents / 100).toFixed(2)}${((_liftedForSnapshot_subscription = liftedForSnapshot.subscription) == null ? void 0 : _liftedForSnapshot_subscription.interval) ? `/${liftedForSnapshot.subscription.interval}` : ''}`
-            }, (object == null ? void 0 : (_object_customer_details = object.customer_details) == null ? void 0 : _object_customer_details.email) ? {
-                body: object.customer_details.email
-            } : {}, {
+                title: `New subscriber on {site} — ${subscriptionPrice}`,
+                // Who subscribed, to what and where (AGL-3432).
+                body: `${subscriberEmail || 'A shopper'} subscribed to ` + `${String((_productForSnapshot_get1 = productForSnapshot.get('name')) != null ? _productForSnapshot_get1 : 'a product')} on ` + `{site} for ${subscriptionPrice}.`,
                 link: `/${hostId}/products`
-            }));
+            });
             // AWAITED SINCE AGL-2473, here and at the five sibling call sites in
             // this file. `upsertHostContact` carries `purchaseCents`, so it is what
             // feeds `ltvCents` and the RFM ranking — a `void`ed one is a paying
@@ -1944,7 +1964,7 @@ async function findOrderForDispute(paymentIntentId) {
             await captureHostContact(_extends({
                 hostId: String(hostId),
                 email: object == null ? void 0 : (_object_customer_details1 = object.customer_details) == null ? void 0 : _object_customer_details1.email,
-                name: (_ref14 = object == null ? void 0 : (_object_customer_details2 = object.customer_details) == null ? void 0 : _object_customer_details2.name) != null ? _ref14 : undefined,
+                name: (_ref10 = object == null ? void 0 : (_object_customer_details2 = object.customer_details) == null ? void 0 : _object_customer_details2.name) != null ? _ref10 : undefined,
                 source: 'order',
                 // Every order door names `customer` (AGL-2612): a floor, so the
                 // stage fills or advances and never moves anybody back.
@@ -1993,23 +2013,23 @@ async function findOrderForDispute(paymentIntentId) {
     // is enabled). Handling both means the branch fires whichever is on; the
     // invoice-id guard means having both on records the cycle once.
     if (type === 'invoice.payment_succeeded' || type === 'invoice.paid') {
-        var _ref15, _ref16, _ref17, _ref18, _ref19, _ref20;
+        var _ref11, _ref12, _ref13, _ref14, _ref15, _ref16;
         var _object_subscription_details, _object_parent_subscription_details, _object_parent, _object_parent_subscription_details1, _object_parent1;
         // The SUBSCRIPTION's metadata, which is what `checkout.ts` sets
         // (`subscription_data[metadata]`) — the invoice's own `metadata` is a
         // different, empty bag. `parent.subscription_details` is where newer API
         // versions moved it; both are read because the endpoint's version is not
         // visible from here.
-        const subscriptionMeta = (_ref15 = (_ref16 = object == null ? void 0 : (_object_subscription_details = object.subscription_details) == null ? void 0 : _object_subscription_details.metadata) != null ? _ref16 : object == null ? void 0 : (_object_parent = object.parent) == null ? void 0 : (_object_parent_subscription_details = _object_parent.subscription_details) == null ? void 0 : _object_parent_subscription_details.metadata) != null ? _ref15 : null;
-        const invoiceId = String((_ref17 = object == null ? void 0 : object.id) != null ? _ref17 : '');
-        const subscriptionId = String((_ref18 = (_ref19 = object == null ? void 0 : object.subscription) != null ? _ref19 : object == null ? void 0 : (_object_parent1 = object.parent) == null ? void 0 : (_object_parent_subscription_details1 = _object_parent1.subscription_details) == null ? void 0 : _object_parent_subscription_details1.subscription) != null ? _ref18 : '');
-        const invoiceHostId = String((_ref20 = subscriptionMeta == null ? void 0 : subscriptionMeta.hostId) != null ? _ref20 : '');
+        const subscriptionMeta = (_ref11 = (_ref12 = object == null ? void 0 : (_object_subscription_details = object.subscription_details) == null ? void 0 : _object_subscription_details.metadata) != null ? _ref12 : object == null ? void 0 : (_object_parent = object.parent) == null ? void 0 : (_object_parent_subscription_details = _object_parent.subscription_details) == null ? void 0 : _object_parent_subscription_details.metadata) != null ? _ref11 : null;
+        const invoiceId = String((_ref13 = object == null ? void 0 : object.id) != null ? _ref13 : '');
+        const subscriptionId = String((_ref14 = (_ref15 = object == null ? void 0 : object.subscription) != null ? _ref15 : object == null ? void 0 : (_object_parent1 = object.parent) == null ? void 0 : (_object_parent_subscription_details1 = _object_parent1.subscription_details) == null ? void 0 : _object_parent_subscription_details1.subscription) != null ? _ref14 : '');
+        const invoiceHostId = String((_ref16 = subscriptionMeta == null ? void 0 : subscriptionMeta.hostId) != null ? _ref16 : '');
         // Platform billing — Aglyn charging its own customers — runs through the
         // same endpoint and the same fan-out, and its invoices carry `orgId`
         // instead. Self-selection is on the same discriminator every other
         // section of this file uses.
         if ((subscriptionMeta == null ? void 0 : subscriptionMeta.type) === 'commerce-subscription' && invoiceHostId && subscriptionId && invoiceId) {
-            var _soldSnapshot_get, _ref21, _ref22, _ref23, _ref24, _ref25;
+            var _soldSnapshot_get, _ref17, _ref18, _ref19, _ref20, _ref21;
             var _this, _this1, _object_status_transitions, _object_customer_shipping;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(invoiceHostId);
@@ -2060,7 +2080,7 @@ async function findOrderForDispute(paymentIntentId) {
             // and only for them.
             const soldSnapshot = await subscriptionRef.get();
             const soldLine = (_this1 = (_soldSnapshot_get = soldSnapshot.get('lineItems')) != null ? _soldSnapshot_get : []) == null ? void 0 : _this1[0];
-            const productId = String((_ref21 = (_ref22 = (_ref23 = soldLine == null ? void 0 : soldLine.productId) != null ? _ref23 : soldSnapshot.get('productId')) != null ? _ref22 : subscriptionMeta == null ? void 0 : subscriptionMeta.productId) != null ? _ref21 : '');
+            const productId = String((_ref17 = (_ref18 = (_ref19 = soldLine == null ? void 0 : soldLine.productId) != null ? _ref19 : soldSnapshot.get('productId')) != null ? _ref18 : subscriptionMeta == null ? void 0 : subscriptionMeta.productId) != null ? _ref17 : '');
             let snapshot;
             if (soldLine) {
                 snapshot = _extends({
@@ -2077,7 +2097,7 @@ async function findOrderForDispute(paymentIntentId) {
                     productType: soldLine.productType
                 } : {});
             } else {
-                var _ref26, _soldSnapshot_get1, _ref27, _ref28;
+                var _ref22, _soldSnapshot_get1, _ref23, _ref24;
                 // AGL-1763: no product id, no read. `doc('__missing__')` was a
                 // deliberate miss that Firestore does not permit — a document id
                 // matching `__.*__` is RESERVED, so the backend rejects the path with
@@ -2090,18 +2110,18 @@ async function findOrderForDispute(paymentIntentId) {
                 // exactly the population this branch now serves: a subscription
                 // Aglyn has no record of, whose metadata nothing of ours wrote.
                 const productSnapshot = productId ? await hostRef.collection('products').doc(productId).get() : null;
-                const lifted = CommerceModel.liftLegacyProduct((_ref26 = productSnapshot == null ? void 0 : productSnapshot.data()) != null ? _ref26 : {
+                const lifted = CommerceModel.liftLegacyProduct((_ref22 = productSnapshot == null ? void 0 : productSnapshot.data()) != null ? _ref22 : {
                     name: 'Subscription'
                 });
                 const variantId = String((_soldSnapshot_get1 = soldSnapshot.get('variantId')) != null ? _soldSnapshot_get1 : '');
                 const variant = variantId ? lifted.variants.find((item)=>item.id === variantId) : lifted.variants[0];
-                const variantOptions = Object.values((_ref27 = variant == null ? void 0 : variant.options) != null ? _ref27 : {});
+                const variantOptions = Object.values((_ref23 = variant == null ? void 0 : variant.options) != null ? _ref23 : {});
                 snapshot = _extends({
                     productId
                 }, variantId ? {
                     variantId
                 } : {}, {
-                    name: String((_ref28 = productSnapshot == null ? void 0 : productSnapshot.get('name')) != null ? _ref28 : 'Subscription')
+                    name: String((_ref24 = productSnapshot == null ? void 0 : productSnapshot.get('name')) != null ? _ref24 : 'Subscription')
                 }, variantOptions.length ? {
                     variantLabel: variantOptions.join(' / ')
                 } : {}, (variant == null ? void 0 : variant.sku) ? {
@@ -2123,8 +2143,8 @@ async function findOrderForDispute(paymentIntentId) {
             const invoiceTotals = _extends({}, computedInvoiceTotals, {
                 feeCents: feeCentsInForce
             });
-            const paidCents = Math.max(0, Math.round(Number((_ref24 = object == null ? void 0 : object.amount_paid) != null ? _ref24 : 0)));
-            const billingReason = String((_ref25 = object == null ? void 0 : object.billing_reason) != null ? _ref25 : '');
+            const paidCents = Math.max(0, Math.round(Number((_ref20 = object == null ? void 0 : object.amount_paid) != null ? _ref20 : 0)));
+            const billingReason = String((_ref21 = object == null ? void 0 : object.billing_reason) != null ? _ref21 : '');
             // The subscription's FIRST invoice is also a paid invoice, and
             // `checkout.session.completed` has already counted that money into the
             // contact's lifetime value and already told the managers about it
@@ -2395,7 +2415,12 @@ async function findOrderForDispute(paymentIntentId) {
             // `renewalOrgUnreadable` and not `!renewalOrg` (AGL-2258): a null org
             // we successfully read still stops, which is AGL-2071's decision.
             if (!renewalEntitled && !renewalOrgUnreadable) {
-                await stopLapsedStorefrontSubscription(invoiceHostId, subscriptionId, subscriptionRef);
+                var _ref25, _ref26;
+                await stopLapsedStorefrontSubscription(invoiceHostId, subscriptionId, subscriptionRef, {
+                    subscriberEmail: (_ref25 = (_ref26 = object == null ? void 0 : object.customer_email) != null ? _ref26 : soldSnapshot.get('customerEmail')) != null ? _ref25 : null,
+                    productName: snapshot.name || 'a subscription product',
+                    org: renewalOrg != null ? renewalOrg : null
+                });
             } else if (renewalEntitled) {
                 // RE-PRICE THE PLATFORM FEE (AGL-2289). `application_fee_percent` was
                 // set once at the sale and never revisited, and it lives on the
@@ -2444,8 +2469,8 @@ async function findOrderForDispute(paymentIntentId) {
                     const stockVariantId = (_snapshot_variantId = snapshot.variantId) != null ? _snapshot_variantId : (_stocked_variants_ = stocked.variants[0]) == null ? void 0 : _stocked_variants_.id;
                     const tracked = stocked.variants.some((variant)=>variant.id === stockVariantId && variant.inventory != null);
                     if (stockVariantId && tracked) {
-                        var _ref29;
-                        const cycleQuantity = (_ref29 = cycleLine == null ? void 0 : cycleLine.quantity) != null ? _ref29 : 1;
+                        var _ref27;
+                        const cycleQuantity = (_ref27 = cycleLine == null ? void 0 : cycleLine.quantity) != null ? _ref27 : 1;
                         // Atomic since AGL-2320, like every other decrement: a renewal
                         // batch bills many subscribers at once, so two cycles of the same
                         // physical box are exactly the concurrent pair that lost a
@@ -2470,20 +2495,20 @@ async function findOrderForDispute(paymentIntentId) {
                 }
             }
             if (!isOpeningInvoice && paidCents > 0) {
-                var _ref30, _ref31;
-                const renewalEmail = (_ref30 = (_ref31 = object == null ? void 0 : object.customer_email) != null ? _ref31 : soldSnapshot.get('customerEmail')) != null ? _ref30 : null;
+                var _ref28, _ref29;
+                const renewalEmail = (_ref28 = (_ref29 = object == null ? void 0 : object.customer_email) != null ? _ref29 : soldSnapshot.get('customerEmail')) != null ? _ref28 : null;
                 // A physical cycle now lands in Orders (AGL-1750), but the console
                 // still has no Subscriptions tab, so for a digital or service
                 // subscription this notification remains the only place a merchant
                 // learns the money arrived at all.
-                void notifyHostManagers(invoiceHostId, _extends({
+                const renewalPrice = `$${(paidCents / 100).toFixed(2)}${interval ? `/${interval}` : ''}`;
+                void notifyHostManagers(invoiceHostId, {
                     type: 'content.order',
-                    title: `Subscription renewed — $${(paidCents / 100).toFixed(2)}${interval ? `/${interval}` : ''}`
-                }, renewalEmail ? {
-                    body: String(renewalEmail)
-                } : {}, {
+                    title: `Subscription renewed on {site} — ${renewalPrice}`,
+                    // Whose subscription, to what and where (AGL-3432).
+                    body: `${renewalEmail ? `${String(renewalEmail)}'s` : 'A'} ` + `subscription to ${snapshot.name || 'a product'} on {site} ` + `renewed for ${renewalPrice}.`,
                     link: `/${invoiceHostId}/products`
-                }));
+                });
                 // RFM (AGL-328): a subscriber in month 12 has paid twelve times, and
                 // counting only the first charge ranks them as a one-purchase
                 // customer forever. Keyed to the invoice so the guard above is what
@@ -2510,7 +2535,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata17;
         const { hostId, reservationId } = (_object_metadata17 = object.metadata) != null ? _object_metadata17 : {};
         if (hostId && reservationId) {
-            var _ref32, _ref33;
+            var _ref30, _ref31;
             var _object_metadata18;
             const firestore = firebaseAdmin.app().firestore();
             const reservationRef = firestore.collection('hosts').doc(String(hostId)).collection('reservations').doc(String(reservationId));
@@ -2523,7 +2548,7 @@ async function findOrderForDispute(paymentIntentId) {
             // `amount_total` is stay-plus-tax and Stripe's own tax fields read
             // zero; the session's metadata is the only witness, exactly as it is
             // for a buy-now sale.
-            const taxCents = Math.max(0, Math.round(Number((_ref32 = object == null ? void 0 : (_object_metadata18 = object.metadata) == null ? void 0 : _object_metadata18.taxCents) != null ? _ref32 : 0)));
+            const taxCents = Math.max(0, Math.round(Number((_ref30 = object == null ? void 0 : (_object_metadata18 = object.metadata) == null ? void 0 : _object_metadata18.taxCents) != null ? _ref30 : 0)));
             // What the guest actually handed over, MINUS that tax. This is the
             // DEPOSIT when the resource has one (`reserve.ts` charges
             // `depositCents || totalCents`), never the stay's `totalCents` — see
@@ -2537,7 +2562,7 @@ async function findOrderForDispute(paymentIntentId) {
             // are and under-state what the merchant collects at the register. The
             // same figure feeds the guest's lifetime value, which tax is no part
             // of either (AGL-1755).
-            const paidCents = Math.max(0, Math.round(Number((_ref33 = object == null ? void 0 : object.amount_total) != null ? _ref33 : 0)) - taxCents);
+            const paidCents = Math.max(0, Math.round(Number((_ref31 = object == null ? void 0 : object.amount_total) != null ? _ref31 : 0)) - taxCents);
             // Redelivery guard (AGL-1755), the AGL-1748 shape. The `pending` ->
             // `confirmed` transition was always the guard, but it was a
             // read-then-write with every side effect hanging off it, so two
@@ -2608,17 +2633,44 @@ async function findOrderForDispute(paymentIntentId) {
                 return true;
             });
             if (confirmedNow) {
-                var _ref34, _ref35;
+                var _reservation_nights, _reservation_totalCents, _ref32, _ref33, _ref34, _ref35, _ref36;
                 var _object_customer_details3, _object_customer_details4, _object_customer_details5;
                 const reservation = reserved != null ? reserved : {};
-                void notifyHostManagers(String(hostId), _extends({
+                // A day key, so its UTC date IS the check-in date.
+                const checkInShort = new Date(Number(reservation['checkInDayMs'])).toUTCString().slice(0, 16);
+                const nights = Number((_reservation_nights = reservation['nights']) != null ? _reservation_nights : 0);
+                const nightsText = `${nights} night${nights === 1 ? '' : 's'}`;
+                /*
+           * WHAT THE GUEST WAS CHARGED TODAY, tax included (AGL-3442).
+           *
+           * `paidCents` is the money applied to the STAY and leaves out the
+           * merchant's lodging tax, so a guest told only that figure is told
+           * less than their card was charged. The two together are Stripe's
+           * session total, and the tax is the figure `reserve.ts` charged as
+           * its own line, named so the guest can match it to their receipt.
+           * The balance below is the stay's alone: the tax is charged on what
+           * is collected at booking, and nothing computes one on what is
+           * collected at the property.
+           */ const charged = `$${((paidCents + taxCents) / 100).toFixed(2)}`;
+                const taxIncluded = taxCents > 0 ? `, including $${(taxCents / 100).toFixed(2)} lodging tax` : '';
+                const paid = `${charged}${taxIncluded}`;
+                // What the guest still owes for the stay: the console's
+                // reservations card collects `totalCents - paidCents` at the
+                // property, so the guest is told it too (AGL-3432).
+                const balanceCents = Math.max(0, Math.round(Number((_reservation_totalCents = reservation['totalCents']) != null ? _reservation_totalCents : 0)) - paidCents);
+                const balance = `$${(balanceCents / 100).toFixed(2)}`;
+                const reservedBy = (_ref32 = (_ref33 = object == null ? void 0 : (_object_customer_details3 = object.customer_details) == null ? void 0 : _object_customer_details3.email) != null ? _ref33 : reservation['guestEmail']) != null ? _ref32 : 'A guest';
+                // Which room or unit was reserved (AGL-3432): on a property with
+                // several, "a stay" does not say which one to get ready.
+                const resourceName = reservation['resourceId'] ? String((_ref34 = await firestore.collection('hosts').doc(String(hostId)).collection('resources').doc(String(reservation['resourceId'])).get().then((snapshot)=>snapshot.get('name')).catch(()=>'')) != null ? _ref34 : '').trim() : '';
+                void notifyHostManagers(String(hostId), {
                     type: 'content.booking',
-                    title: 'New reservation'
-                }, (object == null ? void 0 : (_object_customer_details3 = object.customer_details) == null ? void 0 : _object_customer_details3.email) ? {
-                    body: object.customer_details.email
-                } : {}, {
+                    title: 'New reservation on {site}',
+                    // Who, what, when, what was paid and what is still owed
+                    // (AGL-3432).
+                    body: `${reservedBy} reserved ${resourceName || 'a stay'} on {site}: check-in ` + `${checkInShort}, ${nightsText}. ${charged} was paid${taxIncluded}` + (balanceCents > 0 ? `; ${balance} is still to collect at the property.` : '.'),
                     link: `/${hostId}/products`
-                }));
+                });
                 // Contacts ingestion (AGL-1755): this branch stored `paidCents` from
                 // `amount_total` and then called `upsertHostContact` with no amount,
                 // so a guest who paid for a stay showed a lifetime value of zero. A
@@ -2648,14 +2700,14 @@ async function findOrderForDispute(paymentIntentId) {
                 // exactly once. Taking `totalCents` here is what WOULD double-count:
                 // it would claim money the guest has not paid yet and will pay again
                 // through the register.
-                const guestContactEmail = (_ref34 = (_ref35 = object == null ? void 0 : (_object_customer_details4 = object.customer_details) == null ? void 0 : _object_customer_details4.email) != null ? _ref35 : reservation['guestEmail']) != null ? _ref34 : null;
+                const guestContactEmail = (_ref35 = (_ref36 = object == null ? void 0 : (_object_customer_details4 = object.customer_details) == null ? void 0 : _object_customer_details4.email) != null ? _ref36 : reservation['guestEmail']) != null ? _ref35 : null;
                 if (guestContactEmail) {
-                    var _ref36, _ref37;
+                    var _ref37, _ref38;
                     var _object_customer_details6;
                     await captureHostContact(_extends({
                         hostId: String(hostId),
                         email: guestContactEmail,
-                        name: (_ref36 = (_ref37 = object == null ? void 0 : (_object_customer_details6 = object.customer_details) == null ? void 0 : _object_customer_details6.name) != null ? _ref37 : reservation['guestName']) != null ? _ref36 : undefined,
+                        name: (_ref37 = (_ref38 = object == null ? void 0 : (_object_customer_details6 = object.customer_details) == null ? void 0 : _object_customer_details6.name) != null ? _ref38 : reservation['guestName']) != null ? _ref37 : undefined,
                         source: 'booking',
                         // A paid stay is a sale (AGL-2612), whatever the source says
                         // about the kind of thing that was bought.
@@ -2671,21 +2723,22 @@ async function findOrderForDispute(paymentIntentId) {
                 }
                 const guestEmail = object == null ? void 0 : (_object_customer_details5 = object.customer_details) == null ? void 0 : _object_customer_details5.email;
                 if (guestEmail) {
-                    var _reservation_nights, _ref38;
-                    const checkIn = new Date(Number(reservation['checkInDayMs'])).toUTCString();
-                    const paid = `$${(paidCents / 100).toFixed(2)}`;
-                    const checkInShort = checkIn.slice(0, 16);
-                    const fallbackText = `Your stay is confirmed!\n\nCheck-in: ${checkInShort}\n` + `Nights: ${reservation['nights']}\n` + `Paid today: ${paid}\n` + `Reference: ${reservationId}`;
+                    var _reservation_nights1, _ref39;
+                    // The balance as a whole line, empty when the stay is paid in
+                    // full so the built-in copy leaves it out.
+                    const balanceNote = balanceCents > 0 ? `Still to pay: ${balance}, at the property. It has not been charged.` : '';
+                    const fallbackText = `Your stay is confirmed!\n\nCheck-in: ${checkInShort}\n` + `Nights: ${reservation['nights']}\n` + `Paid today: ${paid}\n` + (balanceNote ? `${balanceNote}\n` : '') + `Reference: ${reservationId}`;
                     // Site-owner-designed template when published (AGL-771).
                     const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'reservation-confirmed', {
                         'reservation.checkIn': checkInShort,
-                        'reservation.nights': String((_reservation_nights = reservation['nights']) != null ? _reservation_nights : ''),
+                        'reservation.nights': String((_reservation_nights1 = reservation['nights']) != null ? _reservation_nights1 : ''),
                         'reservation.paid': paid,
+                        'reservation.balance': balanceNote,
                         'reservation.ref': String(reservationId)
                     });
                     await sendEmail(_extends({
                         to: guestEmail,
-                        subject: (_ref38 = designed == null ? void 0 : designed.subject) != null ? _ref38 : 'Reservation confirmed',
+                        subject: (_ref39 = designed == null ? void 0 : designed.subject) != null ? _ref39 : 'Reservation confirmed',
                         text: (designed == null ? void 0 : designed.text) || fallbackText
                     }, (designed == null ? void 0 : designed.html) ? {
                         html: designed.html
@@ -2711,7 +2764,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata19;
         const { hostId, cartId, feeCents, couponCode } = (_object_metadata19 = object.metadata) != null ? _object_metadata19 : {};
         if (hostId && cartId) {
-            var _cartSnapshot_data, _ref39, _ref40, _ref41, _ref42, _ref43, _ref44;
+            var _cartSnapshot_data, _ref40, _ref41, _ref42, _ref43, _ref44, _ref45;
             var _object_customer_details7, _object_metadata20, _object_customer_details8, _object_customer_details9, _object_customer_details10, _object_metadata21, _this2, _object_metadata22;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
@@ -2777,7 +2830,11 @@ async function findOrderForDispute(paymentIntentId) {
                     unitAmountCents: Math.round(Number((_ref = variant == null ? void 0 : variant.priceUsd) != null ? _ref : 0) * 100)
                 });
             }).filter(Boolean);
-            const shipping = (_ref39 = object == null ? void 0 : object.shipping_details) != null ? _ref39 : object == null ? void 0 : object.customer_details;
+            const shipping = (_ref40 = object == null ? void 0 : object.shipping_details) != null ? _ref40 : object == null ? void 0 : object.customer_details;
+            // The number the merchant knows this order by, carried out of the
+            // transaction for the notices below (AGL-3432). The document id is
+            // the Stripe session id, which appears nowhere in the console.
+            let cartOrderNumber;
             const created = await firestore.runTransaction(async (transaction)=>{
                 var _counter_get, _ref, _ref1, _ref2, _ref3, _ref4, _shipping_address_line1, _shipping_address_line2, _shipping_address_city, _shipping_address_state, _shipping_address_postal_code, _shipping_address_country, _ref5;
                 var _object_metadata, _object_customer_details, _object_customer_details1;
@@ -2787,6 +2844,7 @@ async function findOrderForDispute(paymentIntentId) {
                 ]);
                 if (existing.exists) return false;
                 const number = Number((_counter_get = counter.get('next')) != null ? _counter_get : 1);
+                cartOrderNumber = number;
                 transaction.set(counterRef, {
                     next: number + 1
                 }, {
@@ -2861,6 +2919,9 @@ async function findOrderForDispute(paymentIntentId) {
             // the non-idempotent effects below (inventory / coupon / gift-card
             // decrements) that would otherwise double-apply.
             if (!created) return;
+            const cartOrderLabel = CommerceModel.formatOrderNumber({
+                number: cartOrderNumber
+            }, String(object.id));
             // AGL-2149: loud, not silent. Logged for the platform and pushed to the
             // merchant, once, behind the same `created` guard as every other
             // non-idempotent effect so a redelivery does not re-nag.
@@ -2873,7 +2934,7 @@ async function findOrderForDispute(paymentIntentId) {
                 void notifyHostManagers(String(hostId), {
                     type: 'content.order',
                     title: 'A paid order is missing items',
-                    body: `Order ${object.id} was charged in full but ` + `${unresolvedLines.length} ${unresolvedLines.length === 1 ? 'line' : 'lines'} could not be recorded — the product was deleted during ` + 'checkout. Refund the difference or fulfill it by hand.',
+                    body: `Order ${cartOrderLabel} on {site} was charged in full, but ` + `${unresolvedLines.length} of its lines could not be recorded ` + 'because the product was deleted during ' + 'checkout. Refund the difference or fulfill it by hand.',
                     link: `/${hostId}/products`
                 });
             }
@@ -2915,10 +2976,10 @@ async function findOrderForDispute(paymentIntentId) {
             // matters, and the order carries the buyer identity anyway.
             const licenseKeysByProduct = {};
             for (const line of lineItems){
-                var _ref45;
+                var _ref46;
                 var _object_customer_details11;
                 if (line.productType !== 'digital') continue;
-                const keys = await assignLicenseKeys(firestore, hostRef, String(hostId), line.productId, String(object.id), (_ref45 = object == null ? void 0 : (_object_customer_details11 = object.customer_details) == null ? void 0 : _object_customer_details11.email) != null ? _ref45 : null, line.quantity);
+                const keys = await assignLicenseKeys(firestore, hostRef, String(hostId), line.productId, String(object.id), (_ref46 = object == null ? void 0 : (_object_customer_details11 = object.customer_details) == null ? void 0 : _object_customer_details11.email) != null ? _ref46 : null, line.quantity);
                 if (keys.length) licenseKeysByProduct[line.productId] = keys;
             }
             if (Object.keys(licenseKeysByProduct).length) {
@@ -2931,9 +2992,9 @@ async function findOrderForDispute(paymentIntentId) {
             // Branded receipt (AGL-296): env-gated like every outbound email.
             const buyerEmailForReceipt = object == null ? void 0 : (_object_customer_details7 = object.customer_details) == null ? void 0 : _object_customer_details7.email;
             if (isEmailConfigured() && buyerEmailForReceipt) {
-                var _ref46, _ref47, _ref48, _ref49;
+                var _ref47, _ref48, _ref49, _ref50;
                 const receiptSettings = await hostRef.collection('settings').doc('store').get().catch(()=>null);
-                const receiptFooter = String((_ref46 = receiptSettings == null ? void 0 : receiptSettings.get('receiptFooter')) != null ? _ref46 : '');
+                const receiptFooter = String((_ref47 = receiptSettings == null ? void 0 : receiptSettings.get('receiptFooter')) != null ? _ref47 : '');
                 const linesText = lineItems.map((line)=>`${line.quantity}× ${line.name}${line.variantLabel ? ` (${line.variantLabel})` : ''} — $${(line.unitAmountCents * line.quantity / 100).toFixed(2)}`).join('\n');
                 // The keys assigned above the gate (AGL-2149); the receipt only
                 // reports them.
@@ -2947,9 +3008,9 @@ async function findOrderForDispute(paymentIntentId) {
                 // Digital delivery links (AGL-302); reuse the canonical mint the
                 // tenant download endpoint verifies so the secret can never drift.
                 const downloadToken = mintDownloadToken(hostId, String(object.id));
-                const siteOrigin = String((_ref47 = object == null ? void 0 : object.success_url) != null ? _ref47 : '').replace(/\/\?.*$|\?.*$/, '');
+                const siteOrigin = String((_ref48 = object == null ? void 0 : object.success_url) != null ? _ref48 : '').replace(/\/\?.*$|\?.*$/, '');
                 const downloadLines = lineItems.filter((line)=>line.productType === 'digital').map((line)=>`Download ${line.name}: ${siteOrigin}/api/commerce/download` + `?hostId=${hostId}&orderId=${object.id}` + `&productId=${line.productId}&token=${downloadToken}`).join('\n');
-                const orderTotal = `$${(Number((_ref48 = object == null ? void 0 : object.amount_total) != null ? _ref48 : 0) / 100).toFixed(2)}`;
+                const orderTotal = `$${(Number((_ref49 = object == null ? void 0 : object.amount_total) != null ? _ref49 : 0) / 100).toFixed(2)}`;
                 const orderSummary = [
                     linesText,
                     licenseText,
@@ -2961,11 +3022,15 @@ async function findOrderForDispute(paymentIntentId) {
                 const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'order-receipt', {
                     'order.summary': orderSummary,
                     'order.total': orderTotal,
-                    'order.ref': String(object.id)
+                    'order.ref': String(object.id),
+                    // The store's own Receipt footer (AGL-3432), as a token: the
+                    // built-in copy always renders (AGL-3370), so a footer that is
+                    // only in the fallback text above never reaches a buyer.
+                    'store.receiptFooter': receiptFooter
                 });
                 await sendEmail(_extends({
                     to: buyerEmailForReceipt,
-                    subject: (_ref49 = designed == null ? void 0 : designed.subject) != null ? _ref49 : `Receipt for your order`,
+                    subject: (_ref50 = designed == null ? void 0 : designed.subject) != null ? _ref50 : `Receipt for your order`,
                     text: (designed == null ? void 0 : designed.text) || fallbackText
                 }, (designed == null ? void 0 : designed.html) ? {
                     html: designed.html
@@ -3042,37 +3107,38 @@ async function findOrderForDispute(paymentIntentId) {
             // is byte-identical to what it was before this issue for exactly that
             // reason. The hold refuses the SECOND shopper; it never gates the
             // first one's goods.
-            await releaseStockHold(hostRef, String((_ref40 = (_object_metadata20 = object.metadata) == null ? void 0 : _object_metadata20.stockHoldKey) != null ? _ref40 : ''));
-            void notifyHostManagers(String(hostId), _extends({
+            await releaseStockHold(hostRef, String((_ref41 = (_object_metadata20 = object.metadata) == null ? void 0 : _object_metadata20.stockHoldKey) != null ? _ref41 : ''));
+            const cartOrderTotal = `$${(Number((_ref42 = object == null ? void 0 : object.amount_total) != null ? _ref42 : 0) / 100).toFixed(2)}`;
+            const cartUnits = lineItems.reduce((sum, line)=>sum + line.quantity, 0);
+            void notifyHostManagers(String(hostId), {
                 type: 'content.order',
-                title: `New order — $${(Number((_ref41 = object == null ? void 0 : object.amount_total) != null ? _ref41 : 0) / 100).toFixed(2)}`
-            }, (object == null ? void 0 : (_object_customer_details8 = object.customer_details) == null ? void 0 : _object_customer_details8.email) ? {
-                body: `From ${object.customer_details.email}`
-            } : {}, {
+                title: `New order on {site} — ${cartOrderTotal}`,
+                // What came in, from whom and where (AGL-3432).
+                body: `Order ${cartOrderLabel} came in on {site}: ${cartUnits} ` + `item${cartUnits === 1 ? '' : 's'}, ${cartOrderTotal}` + ((object == null ? void 0 : (_object_customer_details8 = object.customer_details) == null ? void 0 : _object_customer_details8.email) ? `, from ${object.customer_details.email}.` : '.'),
                 link: `/${hostId}/products`
-            }));
+            });
             await captureHostContact(_extends({
                 hostId: String(hostId),
                 email: object == null ? void 0 : (_object_customer_details9 = object.customer_details) == null ? void 0 : _object_customer_details9.email,
-                name: (_ref42 = object == null ? void 0 : (_object_customer_details10 = object.customer_details) == null ? void 0 : _object_customer_details10.name) != null ? _ref42 : undefined,
+                name: (_ref43 = object == null ? void 0 : (_object_customer_details10 = object.customer_details) == null ? void 0 : _object_customer_details10.name) != null ? _ref43 : undefined,
                 source: 'order',
                 initialLifecycleStage: 'customer'
             }, marketingOptIn ? {
                 marketingConsent: true
             } : {}, {
-                purchaseCents: Number((_ref43 = object == null ? void 0 : object.amount_total) != null ? _ref43 : 0),
+                purchaseCents: Number((_ref44 = object == null ? void 0 : object.amount_total) != null ? _ref44 : 0),
                 interaction: {
                     refId: String(object.id),
-                    summary: `Placed an order ($${(Number((_ref44 = object == null ? void 0 : object.amount_total) != null ? _ref44 : 0) / 100).toFixed(2)})`
+                    summary: `Placed an order ($${(Number((_ref45 = object == null ? void 0 : object.amount_total) != null ? _ref45 : 0) / 100).toFixed(2)})`
                 }
             }));
             if (couponCode) {
-                var _ref50;
+                var _ref51;
                 var _object_metadata23;
                 await settleRedemption({
                     firestore,
                     ref: hostRef.collection('coupons').doc(String(couponCode)),
-                    holdKey: String((_ref50 = (_object_metadata23 = object.metadata) == null ? void 0 : _object_metadata23.couponHoldKey) != null ? _ref50 : ''),
+                    holdKey: String((_ref51 = (_object_metadata23 = object.metadata) == null ? void 0 : _object_metadata23.couponHoldKey) != null ? _ref51 : ''),
                     orderRef,
                     label: `coupon ${couponCode}`,
                     detail: `Coupon ${couponCode} was applied to this order but no longer ` + 'exists, so the redemption is uncounted against its limit.'
@@ -3080,10 +3146,10 @@ async function findOrderForDispute(paymentIntentId) {
             }
             // Gift card balance settlement (AGL-322, made a settlement by AGL-2449).
             if ((_object_metadata21 = object.metadata) == null ? void 0 : _object_metadata21.giftCardCode) {
-                var _ref51, _ref52;
+                var _ref52, _ref53;
                 var _object_metadata24, _object_metadata25;
-                const giftCardCents = Number((_ref51 = (_object_metadata24 = object.metadata) == null ? void 0 : _object_metadata24.giftCardCents) != null ? _ref51 : 0);
-                const holdKey = String((_ref52 = (_object_metadata25 = object.metadata) == null ? void 0 : _object_metadata25.giftCardHoldKey) != null ? _ref52 : '');
+                const giftCardCents = Number((_ref52 = (_object_metadata24 = object.metadata) == null ? void 0 : _object_metadata24.giftCardCents) != null ? _ref52 : 0);
+                const holdKey = String((_ref53 = (_object_metadata25 = object.metadata) == null ? void 0 : _object_metadata25.giftCardHoldKey) != null ? _ref53 : '');
                 const cardRef = hostRef.collection('giftCards').doc(String(object.metadata.giftCardCode));
                 const orphanNote = `$${(giftCardCents / 100).toFixed(2)} was applied from gift card ` + `${object.metadata.giftCardCode}, which no longer exists. The ` + 'balance was not deducted from any card.';
                 if (!holdKey) {
@@ -3163,7 +3229,7 @@ async function findOrderForDispute(paymentIntentId) {
                 const lineProduct = productsById.get(line.productId);
                 if (!(lineProduct == null ? void 0 : lineProduct.giftCard)) continue;
                 for(let unit = 0; unit < line.quantity; unit += 1){
-                    var _ref53, _ref54;
+                    var _ref54, _ref55;
                     var _object_customer_details12, _object_customer_details13, _object_customer_details14;
                     const code = `GC-${createHmac('sha256', String(object.id)).update(`${line.productId}:${unit}:${Date.now()}`).digest('hex').slice(0, 12).toUpperCase()}`;
                     // THE EMAIL IS GATED ON THE WRITE (AGL-2161). This `.set()` used
@@ -3182,13 +3248,13 @@ async function findOrderForDispute(paymentIntentId) {
                     const issued = await hostRef.collection('giftCards').doc(code).set({
                         initialCents: line.unitAmountCents,
                         balanceCents: line.unitAmountCents,
-                        recipientEmail: (_ref53 = object == null ? void 0 : (_object_customer_details12 = object.customer_details) == null ? void 0 : _object_customer_details12.email) != null ? _ref53 : null,
+                        recipientEmail: (_ref54 = object == null ? void 0 : (_object_customer_details12 = object.customer_details) == null ? void 0 : _object_customer_details12.email) != null ? _ref54 : null,
                         orderId: String(object.id),
                         // Which line bought it, so a refund that withdraws that line
                         // voids this card and no other (AGL-3363).
                         productId: line.productId,
                         // What the console's Gift cards search asks (AGL-3321).
-                        searchTokens: giftCardSearchTokens(code, (_ref54 = object == null ? void 0 : (_object_customer_details13 = object.customer_details) == null ? void 0 : _object_customer_details13.email) != null ? _ref54 : null),
+                        searchTokens: giftCardSearchTokens(code, (_ref55 = object == null ? void 0 : (_object_customer_details13 = object.customer_details) == null ? void 0 : _object_customer_details13.email) != null ? _ref55 : null),
                         createdAtMs: Date.now()
                     }).then(()=>true).catch((error)=>{
                         console.error('Gift card issuance failed', hostId, code, error);
@@ -3209,24 +3275,27 @@ async function findOrderForDispute(paymentIntentId) {
                         void notifyHostManagers(String(hostId), {
                             type: 'content.order',
                             title: 'Gift card paid for but not issued',
-                            body: `A $${(line.unitAmountCents / 100).toFixed(2)} gift card on ` + `order ${String(object.id)} could not be written, so no code ` + 'was emailed to the buyer. Issue one by hand from Gift cards.',
+                            body: `A $${(line.unitAmountCents / 100).toFixed(2)} gift card ` + `bought on {site} (order ${cartOrderLabel}) could not be ` + 'written, so no code was emailed to the buyer. Issue one by ' + 'hand from Gift cards.',
                             link: `/${hostId}/products`
                         });
                         continue;
                     }
                     const giftTo = object == null ? void 0 : (_object_customer_details14 = object.customer_details) == null ? void 0 : _object_customer_details14.email;
                     if (giftTo) {
-                        var _ref55;
+                        var _ref56;
                         const giftValue = `$${(line.unitAmountCents / 100).toFixed(2)}`;
                         const fallbackText = `Gift card code: ${code}\n` + `Value: ${giftValue}\n\n` + 'Enter it at checkout to apply the balance.';
-                        // Site-owner-designed template when published (AGL-771).
+                        // Site-owner-designed template when published (AGL-771). A
+                        // bought card carries no note; empty, so the built-in copy
+                        // leaves that line out.
                         const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'gift-card', {
                             'giftcard.code': code,
-                            'giftcard.value': giftValue
+                            'giftcard.value': giftValue,
+                            'giftcard.note': ''
                         });
                         await sendEmail(_extends({
                             to: giftTo,
-                            subject: (_ref55 = designed == null ? void 0 : designed.subject) != null ? _ref55 : 'Your gift card',
+                            subject: (_ref56 = designed == null ? void 0 : designed.subject) != null ? _ref56 : 'Your gift card',
                             text: (designed == null ? void 0 : designed.text) || fallbackText
                         }, (designed == null ? void 0 : designed.html) ? {
                             html: designed.html
@@ -3247,12 +3316,12 @@ async function findOrderForDispute(paymentIntentId) {
             }
             // Discounts engine redemptions (AGL-305).
             if ((_object_metadata22 = object.metadata) == null ? void 0 : _object_metadata22.discountId) {
-                var _ref56;
+                var _ref57;
                 var _object_metadata26;
                 await settleRedemption({
                     firestore,
                     ref: hostRef.collection('discounts').doc(String(object.metadata.discountId)),
-                    holdKey: String((_ref56 = (_object_metadata26 = object.metadata) == null ? void 0 : _object_metadata26.discountHoldKey) != null ? _ref56 : ''),
+                    holdKey: String((_ref57 = (_object_metadata26 = object.metadata) == null ? void 0 : _object_metadata26.discountHoldKey) != null ? _ref57 : ''),
                     orderRef,
                     label: `discount ${object.metadata.discountId}`,
                     detail: `Discount ${object.metadata.discountId} was applied to this ` + 'order but no longer exists, so the redemption is uncounted ' + 'against its limit.'
@@ -3266,7 +3335,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata27;
         const { hostId, orderId, productId } = (_object_metadata27 = object.metadata) != null ? _object_metadata27 : {};
         if (hostId && orderId) {
-            var _ref57, _ref58, _ref59;
+            var _ref58, _ref59, _ref60;
             var _object_total_details, _object_total_details1;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
@@ -3305,7 +3374,7 @@ async function findOrderForDispute(paymentIntentId) {
             //
             // The whole map is written rather than one field of it, so a
             // `merge`-set's nested-map merge and a plain replace agree.
-            const shippingCents = Math.max(0, Math.round(Number((_ref57 = object == null ? void 0 : (_object_total_details = object.total_details) == null ? void 0 : _object_total_details.amount_shipping) != null ? _ref57 : 0) || 0));
+            const shippingCents = Math.max(0, Math.round(Number((_ref58 = object == null ? void 0 : (_object_total_details = object.total_details) == null ? void 0 : _object_total_details.amount_shipping) != null ? _ref58 : 0) || 0));
             // Tax joins shipping in the fold (AGL-1953). `draft-order.ts` now
             // declares tax — a Stripe Tax Rate for a `manual` store, whose figure
             // it already froze into `totals`, or `automatic_tax` for a `stripe`
@@ -3318,8 +3387,8 @@ async function findOrderForDispute(paymentIntentId) {
             // `amount_tax` 0 here (its own figure stays on the order, and its
             // AGL-1953 witness is metadata, not this field), and a draft composed
             // by a store with no tax reports 0 too.
-            const stripeTaxCents = Math.max(0, Math.round(Number((_ref58 = object == null ? void 0 : (_object_total_details1 = object.total_details) == null ? void 0 : _object_total_details1.amount_tax) != null ? _ref58 : 0) || 0));
-            const chargedTotalCents = Number((_ref59 = object == null ? void 0 : object.amount_total) != null ? _ref59 : NaN);
+            const stripeTaxCents = Math.max(0, Math.round(Number((_ref59 = object == null ? void 0 : (_object_total_details1 = object.total_details) == null ? void 0 : _object_total_details1.amount_tax) != null ? _ref59 : 0) || 0));
+            const chargedTotalCents = Number((_ref60 = object == null ? void 0 : object.amount_total) != null ? _ref60 : NaN);
             // `shipping_details` ONLY, unlike the cart branch's
             // `?? customer_details` fallback: that address is the BILLING one, and
             // a card sale rung up at a register completes here too — it must not
@@ -3331,6 +3400,8 @@ async function findOrderForDispute(paymentIntentId) {
             // transaction below. Carried out so the money can be reported after
             // the transaction commits.
             let paidAfterCancel = false;
+            // The canceled order's number, for the notice below (AGL-3432).
+            let canceledOrderLabel = '';
             const flipped = await firestore.runTransaction(async (transaction)=>{
                 var _snapshot_data, _snapshot_data1, _ref, _ref1, _ref2, _ref3, _ref4, _ref5, _lifted_totals, _ref6, _shipTo_name, _shipTo_address_line1, _shipTo_address_line2, _shipTo_address_city, _shipTo_address_state, _shipTo_address_postal_code, _shipTo_address_country;
                 var _object_customer_details, _object_metadata, _object_customer_details1, _lifted_totals1;
@@ -3356,6 +3427,7 @@ async function findOrderForDispute(paymentIntentId) {
                     const alreadyNoted = ((_lifted_timeline = lifted.timeline) != null ? _lifted_timeline : []).some((entry)=>(entry == null ? void 0 : entry.event) === 'paid-after-cancel');
                     if (lifted.status === 'cancelled' && !alreadyNoted) {
                         paidAfterCancel = true;
+                        canceledOrderLabel = CommerceModel.formatOrderNumber(lifted, String(orderId));
                         // `set(..., { merge: true })`, the same call the paying branch
                         // below makes on this document. Nothing here is a nested map, so
                         // merge and replace agree, and the read above has just proven
@@ -3428,13 +3500,13 @@ async function findOrderForDispute(paymentIntentId) {
                 await notifyHostManagers(String(hostId), {
                     type: 'content.order',
                     title: 'A canceled order was paid',
-                    body: `Order ${orderId} was canceled, but its payment link was still ` + 'live and has been paid. The money is in Stripe and no sale was ' + 'recorded — refund it in Stripe or reconcile it by hand.',
+                    body: `Order ${canceledOrderLabel || orderId} on {site} was canceled, ` + 'but its payment link was still live and has been paid. The ' + 'money is in Stripe and no sale was recorded — refund it in ' + 'Stripe or reconcile it by hand.',
                     link: `/${hostId}/orders`
                 });
             }
             if (flipped) {
-                var _ref60, _ref61;
-                var _object_metadata28, _object_customer_details15;
+                var _ref61, _ref62, _ref63, _ref64, _ref65, _ref66;
+                var _object_metadata28, _object_customer_details15, _order_totals, _object_customer_details16;
                 const order = paidOrder;
                 // Discounts engine redemptions (AGL-305), for this branch's BOTH
                 // tenants: a console draft order and a POS card sale, which carry the
@@ -3449,20 +3521,25 @@ async function findOrderForDispute(paymentIntentId) {
                 // the hold existed, which Stripe's at-least-once delivery would run
                 // twice. The transition is what makes it once.
                 if ((_object_metadata28 = object.metadata) == null ? void 0 : _object_metadata28.discountId) {
-                    var _ref62;
+                    var _ref67;
                     var _object_metadata29;
                     await settleRedemption({
                         firestore,
                         ref: hostRef.collection('discounts').doc(String(object.metadata.discountId)),
-                        holdKey: String((_ref62 = (_object_metadata29 = object.metadata) == null ? void 0 : _object_metadata29.discountHoldKey) != null ? _ref62 : ''),
+                        holdKey: String((_ref67 = (_object_metadata29 = object.metadata) == null ? void 0 : _object_metadata29.discountHoldKey) != null ? _ref67 : ''),
                         orderRef,
                         label: `discount ${object.metadata.discountId}`,
                         detail: `Discount ${object.metadata.discountId} was applied to this ` + 'order but no longer exists, so the redemption is uncounted ' + 'against its limit.'
                     });
                 }
+                const draftLabel = CommerceModel.formatOrderNumber(order, String(orderId));
+                const draftPayer = (_ref61 = (_ref62 = object == null ? void 0 : (_object_customer_details15 = object.customer_details) == null ? void 0 : _object_customer_details15.email) != null ? _ref62 : order.customerEmail) != null ? _ref61 : null;
+                const draftPaidCents = Number((_ref63 = object == null ? void 0 : object.amount_total) != null ? _ref63 : 0) || Number((_ref64 = (_order_totals = order.totals) == null ? void 0 : _order_totals.totalCents) != null ? _ref64 : 0);
                 void notifyHostManagers(String(hostId), {
                     type: 'content.order',
-                    title: `Draft order paid — ${CommerceModel.formatOrderNumber(order, String(orderId))}`,
+                    title: `Draft order paid — ${draftLabel}`,
+                    // Who paid what, and where (AGL-3432).
+                    body: `${draftPayer != null ? draftPayer : 'The buyer'} paid draft order ${draftLabel} ` + `on {site}: $${(draftPaidCents / 100).toFixed(2)}.`,
                     link: `/${hostId}/products`
                 });
                 // Contacts ingestion (AGL-1748): this branch flipped the order,
@@ -3477,15 +3554,15 @@ async function findOrderForDispute(paymentIntentId) {
                 // figure the draft was priced at, and the two agree by construction,
                 // but only one of them is the money that moved. Stored totals remain
                 // the fallback for a session shape that reports no total.
-                const draftEmail = (_ref60 = (_ref61 = object == null ? void 0 : (_object_customer_details15 = object.customer_details) == null ? void 0 : _object_customer_details15.email) != null ? _ref61 : order.customerEmail) != null ? _ref60 : null;
+                const draftEmail = (_ref65 = (_ref66 = object == null ? void 0 : (_object_customer_details16 = object.customer_details) == null ? void 0 : _object_customer_details16.email) != null ? _ref66 : order.customerEmail) != null ? _ref65 : null;
                 if (draftEmail) {
-                    var _ref63, _ref64, _ref65;
-                    var _order_totals, _object_customer_details16;
-                    const chargedCents = Number((_ref63 = object == null ? void 0 : object.amount_total) != null ? _ref63 : 0) || Number((_ref64 = (_order_totals = order.totals) == null ? void 0 : _order_totals.totalCents) != null ? _ref64 : 0);
+                    var _ref68, _ref69, _ref70;
+                    var _order_totals1, _object_customer_details17;
+                    const chargedCents = Number((_ref68 = object == null ? void 0 : object.amount_total) != null ? _ref68 : 0) || Number((_ref69 = (_order_totals1 = order.totals) == null ? void 0 : _order_totals1.totalCents) != null ? _ref69 : 0);
                     await captureHostContact(_extends({
                         hostId: String(hostId),
                         email: draftEmail,
-                        name: (_ref65 = object == null ? void 0 : (_object_customer_details16 = object.customer_details) == null ? void 0 : _object_customer_details16.name) != null ? _ref65 : undefined,
+                        name: (_ref70 = object == null ? void 0 : (_object_customer_details17 = object.customer_details) == null ? void 0 : _object_customer_details17.name) != null ? _ref70 : undefined,
                         source: 'order',
                         initialLifecycleStage: 'customer'
                     }, chargedCents > 0 ? {
@@ -3498,15 +3575,15 @@ async function findOrderForDispute(paymentIntentId) {
                     }));
                 }
                 if (productId) {
-                    var _productSnapshot_data, _ref66, _ref67;
+                    var _productSnapshot_data, _ref71, _ref72;
                     var _object_metadata30, _lifted_variants_, _order_lineItems_, _order_lineItems;
                     const productRef = hostRef.collection('products').doc(String(productId));
                     const productSnapshot = await productRef.get();
                     const lifted = CommerceModel.liftLegacyProduct((_productSnapshot_data = productSnapshot.data()) != null ? _productSnapshot_data : {
                         name: 'Product'
                     });
-                    const soldVariantId = String((_ref66 = (_object_metadata30 = object.metadata) == null ? void 0 : _object_metadata30.variantId) != null ? _ref66 : '') || ((_lifted_variants_ = lifted.variants[0]) == null ? void 0 : _lifted_variants_.id);
-                    const quantity = (_ref67 = (_order_lineItems = order.lineItems) == null ? void 0 : (_order_lineItems_ = _order_lineItems[0]) == null ? void 0 : _order_lineItems_.quantity) != null ? _ref67 : 1;
+                    const soldVariantId = String((_ref71 = (_object_metadata30 = object.metadata) == null ? void 0 : _object_metadata30.variantId) != null ? _ref71 : '') || ((_lifted_variants_ = lifted.variants[0]) == null ? void 0 : _lifted_variants_.id);
+                    const quantity = (_ref72 = (_order_lineItems = order.lineItems) == null ? void 0 : (_order_lineItems_ = _order_lineItems[0]) == null ? void 0 : _order_lineItems_.quantity) != null ? _ref72 : 1;
                     if (soldVariantId) {
                         // Atomic since AGL-2320.
                         const moved = await decrementVariantStock({
@@ -3558,10 +3635,10 @@ async function findOrderForDispute(paymentIntentId) {
                     // would decrement it twice.
                     const paidProducts = new Map();
                     for (const line of (_order_lineItems1 = order.lineItems) != null ? _order_lineItems1 : []){
-                        var _ref68, _ref69, _line_variantId1;
+                        var _ref73, _ref74, _line_variantId1;
                         var _lineProduct_variants_;
-                        const lineProductId = String((_ref68 = line == null ? void 0 : line.productId) != null ? _ref68 : '');
-                        const soldQty = Math.round(Number((_ref69 = line == null ? void 0 : line.quantity) != null ? _ref69 : 0));
+                        const lineProductId = String((_ref73 = line == null ? void 0 : line.productId) != null ? _ref73 : '');
+                        const soldQty = Math.round(Number((_ref74 = line == null ? void 0 : line.quantity) != null ? _ref74 : 0));
                         if (!lineProductId || !(soldQty > 0)) continue;
                         // Firestore reserves `__…__` ids and `.doc()` throws
                         // synchronously on one; a corrupt line must not fail the
@@ -3624,8 +3701,8 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata31;
         const { hostId, productId, feeCents, couponCode } = (_object_metadata31 = object.metadata) != null ? _object_metadata31 : {};
         if (hostId && productId) {
-            var _ref70, _productForSnapshot_get1, _productForSnapshot_data1, _ref71, _ref72, _ref73, _ref74, _ref75, _ref76, _ref77;
-            var _object_metadata32, _buyNowLineItems_, _object_customer_details17, _object_customer_details18, _object_customer_details19, _object_metadata33;
+            var _ref75, _productForSnapshot_get2, _productForSnapshot_data1, _ref76, _ref77, _ref78, _ref79, _ref80, _ref81, _ref82;
+            var _object_metadata32, _buyNowLineItems_, _object_customer_details18, _object_customer_details19, _object_customer_details20, _object_metadata33;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
             // Orders v1 (AGL-283): line-item snapshot + totals + timeline with
@@ -3635,9 +3712,9 @@ async function findOrderForDispute(paymentIntentId) {
             // is bounded to Stripe's at-least-once edge).
             const orderRef = hostRef.collection('orders').doc(String(object.id));
             const counterRef = hostRef.collection('counters').doc('orders');
-            const amountCents = Number((_ref70 = object == null ? void 0 : object.amount_total) != null ? _ref70 : 0);
+            const amountCents = Number((_ref75 = object == null ? void 0 : object.amount_total) != null ? _ref75 : 0);
             const productForSnapshot = await hostRef.collection('products').doc(String(productId)).get();
-            const snapshotName = String((_productForSnapshot_get1 = productForSnapshot.get('name')) != null ? _productForSnapshot_get1 : 'Product');
+            const snapshotName = String((_productForSnapshot_get2 = productForSnapshot.get('name')) != null ? _productForSnapshot_get2 : 'Product');
             // AGL-1711: the line item and totals used to be fabricated from
             // `amount_total` alone — one unit, priced at the whole charge, with tax
             // and discount recorded as 0. `computeBuyNowOrder` rebuilds the real
@@ -3648,7 +3725,7 @@ async function findOrderForDispute(paymentIntentId) {
                 name: snapshotName
             });
             const soldVariant = ((_object_metadata32 = object.metadata) == null ? void 0 : _object_metadata32.variantId) ? liftedForSnapshot.variants.find((item)=>item.id === String(object.metadata.variantId)) : liftedForSnapshot.variants[0];
-            const variantOptions = Object.values((_ref71 = soldVariant == null ? void 0 : soldVariant.options) != null ? _ref71 : {});
+            const variantOptions = Object.values((_ref76 = soldVariant == null ? void 0 : soldVariant.options) != null ? _ref76 : {});
             const { lineItems: buyNowLineItems, totals: buyNowTotals } = CommerceModel.computeBuyNowOrder(object, _extends({
                 name: snapshotName
             }, variantOptions.length ? {
@@ -3660,7 +3737,10 @@ async function findOrderForDispute(paymentIntentId) {
             } : {}, liftedForSnapshot.supplierId ? {
                 supplierId: liftedForSnapshot.supplierId
             } : {}));
-            const soldQuantity = (_ref72 = (_buyNowLineItems_ = buyNowLineItems[0]) == null ? void 0 : _buyNowLineItems_.quantity) != null ? _ref72 : 1;
+            const soldQuantity = (_ref77 = (_buyNowLineItems_ = buyNowLineItems[0]) == null ? void 0 : _buyNowLineItems_.quantity) != null ? _ref77 : 1;
+            // The number the merchant knows this order by, for the notices below
+            // (AGL-3432).
+            let buyNowOrderNumber;
             const created = await firestore.runTransaction(async (transaction)=>{
                 var _counter_get, _ref, _ref1, _ref2, _ref3;
                 var _object_metadata, _object_customer_details, _object_customer_details1;
@@ -3670,6 +3750,7 @@ async function findOrderForDispute(paymentIntentId) {
                 ]);
                 if (existing.exists) return false;
                 const number = Number((_counter_get = counter.get('next')) != null ? _counter_get : 1);
+                buyNowOrderNumber = number;
                 transaction.set(counterRef, {
                     next: number + 1
                 }, {
@@ -3716,16 +3797,19 @@ async function findOrderForDispute(paymentIntentId) {
             // Redelivery guard (AGL-498): skip the notification + fulfilment side
             // effects when this order already existed.
             if (!created) return;
+            const buyNowOrderLabel = CommerceModel.formatOrderNumber({
+                number: buyNowOrderNumber
+            }, String(object.id));
             // In-app order notification (wave v6): host managers see sales
-            // in the bell, not just the owner's email.
-            void notifyHostManagers(String(hostId), _extends({
+            // in the bell, not just the owner's email: what came in, from whom
+            // and where (AGL-3432).
+            const buyNowTotal = `$${(Number((_ref78 = object == null ? void 0 : object.amount_total) != null ? _ref78 : 0) / 100).toFixed(2)}`;
+            void notifyHostManagers(String(hostId), {
                 type: 'content.order',
-                title: `New order — $${(Number((_ref73 = object == null ? void 0 : object.amount_total) != null ? _ref73 : 0) / 100).toFixed(2)}`
-            }, (object == null ? void 0 : (_object_customer_details17 = object.customer_details) == null ? void 0 : _object_customer_details17.email) ? {
-                body: `From ${object.customer_details.email}`
-            } : {}, {
+                title: `New order on {site} — ${buyNowTotal}`,
+                body: `Order ${buyNowOrderLabel} came in on {site}: ${soldQuantity}× ` + `${snapshotName}, ${buyNowTotal}` + ((object == null ? void 0 : (_object_customer_details18 = object.customer_details) == null ? void 0 : _object_customer_details18.email) ? `, from ${object.customer_details.email}.` : '.'),
                 link: `/${hostId}/products`
-            }));
+            });
             // Dropship routing (AGL-289): paid lines with a supplier notify
             // it (signed webhook and/or email) and stash a callback token so
             // the supplier can post tracking back. Plan-gated; failures never
@@ -3746,8 +3830,8 @@ async function findOrderForDispute(paymentIntentId) {
             // `supplier-outbox.ts` retries out of band.
             await (async ()=>{
                 try {
-                    var _routedProduct_get, _ref, _ref1;
-                    var _object_customer_details, _object_customer_details1;
+                    var _routedProduct_get, _ref, _ref1, _ref2, _shipTo_address_line1, _shipTo_address_line2, _shipTo_address_city, _shipTo_address_state, _shipTo_address_postal_code, _shipTo_address_country;
+                    var _object_shipping_details, _object_customer_details, _object_customer_details1;
                     const routedOrg = await getOrgForHost(String(hostId));
                     if (!Aglyn.checkEntitlement(routedOrg == null ? void 0 : routedOrg.org, 'dropshipRouting')) {
                         return;
@@ -3770,6 +3854,11 @@ async function findOrderForDispute(paymentIntentId) {
                     }, {
                         merge: true
                     });
+                    // Where the parcel goes (AGL-3432): the address the shopper gave
+                    // at checkout. Buy-now asks for one only when the store ships, so
+                    // it can be absent, and a billing address is never offered in its
+                    // place.
+                    const shipTo = (object == null ? void 0 : (_object_shipping_details = object.shipping_details) == null ? void 0 : _object_shipping_details.address) ? object.shipping_details : null;
                     const payload = {
                         hostId: String(hostId),
                         orderId: String(object.id),
@@ -3779,7 +3868,15 @@ async function findOrderForDispute(paymentIntentId) {
                         // the buyer paid for.
                         quantity: soldQuantity,
                         customerEmail: (_ref = object == null ? void 0 : (_object_customer_details = object.customer_details) == null ? void 0 : _object_customer_details.email) != null ? _ref : null,
-                        shippingName: (_ref1 = object == null ? void 0 : (_object_customer_details1 = object.customer_details) == null ? void 0 : _object_customer_details1.name) != null ? _ref1 : null,
+                        shippingName: (_ref1 = (_ref2 = shipTo == null ? void 0 : shipTo.name) != null ? _ref2 : object == null ? void 0 : (_object_customer_details1 = object.customer_details) == null ? void 0 : _object_customer_details1.name) != null ? _ref1 : null,
+                        shippingAddress: shipTo ? {
+                            line1: (_shipTo_address_line1 = shipTo.address.line1) != null ? _shipTo_address_line1 : null,
+                            line2: (_shipTo_address_line2 = shipTo.address.line2) != null ? _shipTo_address_line2 : null,
+                            city: (_shipTo_address_city = shipTo.address.city) != null ? _shipTo_address_city : null,
+                            state: (_shipTo_address_state = shipTo.address.state) != null ? _shipTo_address_state : null,
+                            postalCode: (_shipTo_address_postal_code = shipTo.address.postal_code) != null ? _shipTo_address_postal_code : null,
+                            country: (_shipTo_address_country = shipTo.address.country) != null ? _shipTo_address_country : null
+                        } : null,
                         updateUrl: `https://${requestHost}/api/commerce/supplier-update` + `?hostId=${hostId}&orderId=${object.id}&token=${supplierToken}`
                     };
                     if (supplier.webhookUrl) {
@@ -3804,11 +3901,31 @@ async function findOrderForDispute(paymentIntentId) {
                         });
                     }
                     if (supplier.email) {
-                        var _ref2, _payload_shippingName;
+                        var _resolveHostToken, _ref3, _payload_shippingName;
+                        // Which store is asking (AGL-3432): a supplier serves several,
+                        // and this mail goes out with no site header to say so.
+                        const storeName = (_resolveHostToken = resolveHostToken('businessName', await hostRef.get().then((snapshot)=>snapshot.data()).catch(()=>undefined))) != null ? _resolveHostToken : 'A store';
+                        const recipient = (_ref3 = (_payload_shippingName = payload.shippingName) != null ? _payload_shippingName : payload.customerEmail) != null ? _ref3 : 'the buyer';
+                        const address = payload.shippingAddress ? [
+                            payload.shippingAddress.line1,
+                            payload.shippingAddress.line2,
+                            [
+                                payload.shippingAddress.city,
+                                [
+                                    payload.shippingAddress.state,
+                                    payload.shippingAddress.postalCode
+                                ].filter(Boolean).join(' ')
+                            ].filter(Boolean).join(', '),
+                            payload.shippingAddress.country
+                        ].filter(Boolean).join(', ') : '';
                         await sendEmail({
                             to: supplier.email,
-                            subject: `New order to fulfill: ${payload.productName}`,
-                            text: `${payload.quantity}× ${payload.productName}\n` + `Ship to: ${(_ref2 = (_payload_shippingName = payload.shippingName) != null ? _payload_shippingName : payload.customerEmail) != null ? _ref2 : 'see order'}\n\n` + `Add tracking: ${payload.updateUrl}&trackingNumber=TRACKING&carrier=CARRIER`,
+                            subject: `New order to fulfill for ${storeName}: ${payload.productName}`,
+                            // The tracking link opens a form for the carrier and the
+                            // number, so it carries no placeholders: a link with
+                            // `trackingNumber=TRACKING` in it, opened unedited, records
+                            // that word as the tracking.
+                            text: `${storeName} has a new order for you to ship: ` + `${payload.quantity}× ${payload.productName} ` + `(order ${buyNowOrderLabel}).\n\n` + (address ? `Ship to: ${recipient}, ${address}\n\n` : `Ship to: ${recipient}. No shipping address was ` + `collected at checkout; ask ${storeName} for it.\n\n`) + 'When it ships, open this link to enter the carrier and ' + `tracking number:\n${payload.updateUrl}`,
                             fromName: (await brandFor(hostId)).fromName,
                             sendingIdentity: await hostSendingIdentity(String(hostId)),
                             audience: 'tenant',
@@ -3828,14 +3945,14 @@ async function findOrderForDispute(paymentIntentId) {
             // Contacts ingestion (AGL-197): buyers become contacts.
             await captureHostContact({
                 hostId: String(hostId),
-                email: object == null ? void 0 : (_object_customer_details18 = object.customer_details) == null ? void 0 : _object_customer_details18.email,
-                name: (_ref74 = object == null ? void 0 : (_object_customer_details19 = object.customer_details) == null ? void 0 : _object_customer_details19.name) != null ? _ref74 : undefined,
+                email: object == null ? void 0 : (_object_customer_details19 = object.customer_details) == null ? void 0 : _object_customer_details19.email,
+                name: (_ref79 = object == null ? void 0 : (_object_customer_details20 = object.customer_details) == null ? void 0 : _object_customer_details20.name) != null ? _ref79 : undefined,
                 source: 'order',
                 initialLifecycleStage: 'customer',
-                purchaseCents: Number((_ref75 = object == null ? void 0 : object.amount_total) != null ? _ref75 : 0),
+                purchaseCents: Number((_ref80 = object == null ? void 0 : object.amount_total) != null ? _ref80 : 0),
                 interaction: {
                     refId: String(object.id),
-                    summary: `Placed an order ($${(Number((_ref76 = object == null ? void 0 : object.amount_total) != null ? _ref76 : 0) / 100).toFixed(2)})`
+                    summary: `Placed an order ($${(Number((_ref81 = object == null ? void 0 : object.amount_total) != null ? _ref81 : 0) / 100).toFixed(2)})`
                 }
             });
             const productRef = hostRef.collection('products').doc(String(productId));
@@ -3853,12 +3970,12 @@ async function findOrderForDispute(paymentIntentId) {
             // serialize; the snapshot above is still read, for the product NAME on
             // the receipt below, and no longer decides any count.
             {
-                var _productSnapshot_data2, _ref78;
+                var _productSnapshot_data2, _ref83;
                 var _object_metadata34, _lifted_variants_1;
                 const lifted = CommerceModel.liftLegacyProduct((_productSnapshot_data2 = productSnapshot.data()) != null ? _productSnapshot_data2 : {
                     name: 'Product'
                 });
-                const soldVariantId = String((_ref78 = (_object_metadata34 = object.metadata) == null ? void 0 : _object_metadata34.variantId) != null ? _ref78 : '') || ((_lifted_variants_1 = lifted.variants[0]) == null ? void 0 : _lifted_variants_1.id);
+                const soldVariantId = String((_ref83 = (_object_metadata34 = object.metadata) == null ? void 0 : _object_metadata34.variantId) != null ? _ref83 : '') || ((_lifted_variants_1 = lifted.variants[0]) == null ? void 0 : _lifted_variants_1.id);
                 if (soldVariantId) {
                     // AGL-1711: `-1` regardless of how many units were bought, so a
                     // 3-unit buy-now sale decremented stock by one and the difference
@@ -3889,14 +4006,14 @@ async function findOrderForDispute(paymentIntentId) {
             // Settlement, the same way round and for the same reason as the cart
             // branch above (AGL-2356): the decrement lands first, then the
             // reservation is dropped.
-            await releaseStockHold(hostRef, String((_ref77 = (_object_metadata33 = object.metadata) == null ? void 0 : _object_metadata33.stockHoldKey) != null ? _ref77 : ''));
+            await releaseStockHold(hostRef, String((_ref82 = (_object_metadata33 = object.metadata) == null ? void 0 : _object_metadata33.stockHoldKey) != null ? _ref82 : ''));
             if (couponCode) {
-                var _ref79;
+                var _ref84;
                 var _object_metadata35;
                 await settleRedemption({
                     firestore,
                     ref: hostRef.collection('coupons').doc(String(couponCode)),
-                    holdKey: String((_ref79 = (_object_metadata35 = object.metadata) == null ? void 0 : _object_metadata35.couponHoldKey) != null ? _ref79 : ''),
+                    holdKey: String((_ref84 = (_object_metadata35 = object.metadata) == null ? void 0 : _object_metadata35.couponHoldKey) != null ? _ref84 : ''),
                     orderRef,
                     label: `coupon ${couponCode}`,
                     detail: `Coupon ${couponCode} was applied to this order but no longer ` + 'exists, so the redemption is uncounted against its limit.'
@@ -3905,24 +4022,31 @@ async function findOrderForDispute(paymentIntentId) {
             // Receipt + seller notification (AGL-96): env-gated like every
             // other outbound email; failures never fail the webhook.
             if (isEmailConfigured()) {
-                var _productSnapshot_get, _ref80;
-                var _object_customer_details20, _org, _this3;
+                var _productSnapshot_get, _ref85;
+                var _object_customer_details21, _org, _this3;
                 const productName = String((_productSnapshot_get = productSnapshot.get('name')) != null ? _productSnapshot_get : 'your purchase');
-                const amount = (Number((_ref80 = object == null ? void 0 : object.amount_total) != null ? _ref80 : 0) / 100).toFixed(2);
-                const buyerEmail = object == null ? void 0 : (_object_customer_details20 = object.customer_details) == null ? void 0 : _object_customer_details20.email;
+                const amount = (Number((_ref85 = object == null ? void 0 : object.amount_total) != null ? _ref85 : 0) / 100).toFixed(2);
+                const buyerEmail = object == null ? void 0 : (_object_customer_details21 = object.customer_details) == null ? void 0 : _object_customer_details21.email;
                 const orderTotal = `$${amount}`;
                 if (buyerEmail) {
-                    var _ref81;
-                    const fallbackText = `Thanks for your purchase!\n\n${productName} — $${amount}` + `\nOrder reference: ${object.id}`;
+                    var _ref86, _ref87;
+                    // The store's own Receipt footer, as the cart receipt carries it
+                    // (AGL-3432).
+                    const receiptFooter = String((_ref86 = await hostRef.collection('settings').doc('store').get().then((snapshot)=>snapshot.get('receiptFooter')).catch(()=>'')) != null ? _ref86 : '');
+                    // The quantity with the name (AGL-3432), so a three-unit sale
+                    // does not read as one item at the whole total.
+                    const receiptLine = `${soldQuantity}× ${productName}`;
+                    const fallbackText = `Thanks for your purchase!\n\n${receiptLine} — $${amount}` + `\nOrder reference: ${object.id}` + (receiptFooter ? `\n\n${receiptFooter}` : '');
                     // Site-owner-designed template when published (AGL-771).
                     const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'order-receipt', {
-                        'order.summary': productName,
+                        'order.summary': receiptLine,
                         'order.total': orderTotal,
-                        'order.ref': String(object.id)
+                        'order.ref': String(object.id),
+                        'store.receiptFooter': receiptFooter
                     });
                     await sendEmail(_extends({
                         to: String(buyerEmail),
-                        subject: (_ref81 = designed == null ? void 0 : designed.subject) != null ? _ref81 : `Receipt: ${productName}`,
+                        subject: (_ref87 = designed == null ? void 0 : designed.subject) != null ? _ref87 : `Receipt: ${productName}`,
                         text: (designed == null ? void 0 : designed.text) || fallbackText
                     }, (designed == null ? void 0 : designed.html) ? {
                         html: designed.html
@@ -3956,7 +4080,7 @@ async function findOrderForDispute(paymentIntentId) {
                     // SSO.
                     const seller = (_this4 = await findUserByUidAcrossPools(sellerUid).catch(()=>null)) == null ? void 0 : _this4.record;
                     if (seller == null ? void 0 : seller.email) {
-                        var _hostSnapshot_get, _ref82;
+                        var _hostSnapshot_get, _ref88;
                         const siteName = String((_hostSnapshot_get = hostSnapshot.get('displayName')) != null ? _hostSnapshot_get : hostId);
                         const fallbackText = `You made a sale on ${siteName}!\n\n${productName} — $${amount}` + (buyerEmail ? `\nBuyer: ${buyerEmail}` : '') + `\nOrder reference: ${object.id}`;
                         // Site-owner-designed template when published (AGL-771).
@@ -3969,7 +4093,7 @@ async function findOrderForDispute(paymentIntentId) {
                         });
                         await sendEmail(_extends({
                             to: seller.email,
-                            subject: (_ref82 = designed == null ? void 0 : designed.subject) != null ? _ref82 : `New order: ${productName}`,
+                            subject: (_ref88 = designed == null ? void 0 : designed.subject) != null ? _ref88 : `New order: ${productName}`,
                             text: (designed == null ? void 0 : designed.text) || fallbackText
                         }, (designed == null ? void 0 : designed.html) ? {
                             html: designed.html
@@ -3999,15 +4123,15 @@ async function findOrderForDispute(paymentIntentId) {
     // the refund is written on the order's timeline. Nothing else is moved: a
     // Dashboard refund is staff's act, and they chose its transfer reversal.
     if (type === 'charge.refunded') {
-        var _ref83, _ref84;
+        var _ref89, _ref90;
         var _object_payment_intent, _snapshot_ref_parent_parent;
-        const paymentIntentId = typeof (object == null ? void 0 : object.payment_intent) === 'string' ? object.payment_intent : String((_ref83 = object == null ? void 0 : (_object_payment_intent = object.payment_intent) == null ? void 0 : _object_payment_intent.id) != null ? _ref83 : '');
+        const paymentIntentId = typeof (object == null ? void 0 : object.payment_intent) === 'string' ? object.payment_intent : String((_ref89 = object == null ? void 0 : (_object_payment_intent = object.payment_intent) == null ? void 0 : _object_payment_intent.id) != null ? _ref89 : '');
         const lookup = paymentIntentId ? await findOrderForDispute(paymentIntentId) : {
             kind: 'not-ours'
         };
         if (lookup.kind !== 'order') return;
         const snapshot = lookup.snapshot;
-        const hostId = String((_ref84 = (_snapshot_ref_parent_parent = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent.id) != null ? _ref84 : '');
+        const hostId = String((_ref90 = (_snapshot_ref_parent_parent = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent.id) != null ? _ref90 : '');
         const external = await recordExternalRefund(snapshot.ref, object);
         if (external && hostId && snapshot.ref.parent.parent) {
             const outcome = await applyExternalRefundToGiftCards({
@@ -4019,9 +4143,12 @@ async function findOrderForDispute(paymentIntentId) {
                 fullyRefunded: external.fullyRefunded
             });
             if (outcome.kind === 'frozen-for-review') {
+                var _snapshot_data;
+                const order = CommerceModel.liftLegacyOrder((_snapshot_data = snapshot.data()) != null ? _snapshot_data : {});
                 await notifyGiftCardHold({
                     hostId,
-                    orderLabel: `order ${snapshot.id}`,
+                    // The order number the merchant knows it by, never its document id.
+                    orderLabel: `order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
                     orderPath: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
                     orderId: snapshot.id,
                     cards: outcome.cards,
@@ -4045,20 +4172,23 @@ async function findOrderForDispute(paymentIntentId) {
     // merchant; both report the site so the seller's fraud ledger can name it.
     const risk = paymentRiskEventFrom(type, object);
     if (risk && risk.signal.kind !== 'dispute') {
-        var _ref85, _snapshot_data;
-        var _snapshot_ref_parent_parent1;
+        var _ref91, _snapshot_data1, _ref92, _ref93;
+        var _snapshot_ref_parent_parent1, _order_totals2;
         const lookup = risk.paymentIntentId ? await findOrderForDispute(risk.paymentIntentId) : {
             kind: 'not-ours'
         };
         if (lookup.kind !== 'order') return;
         const snapshot = lookup.snapshot;
-        const hostId = String((_ref85 = (_snapshot_ref_parent_parent1 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent1.id) != null ? _ref85 : '');
-        const order = CommerceModel.liftLegacyOrder((_snapshot_data = snapshot.data()) != null ? _snapshot_data : {});
+        const hostId = String((_ref91 = (_snapshot_ref_parent_parent1 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent1.id) != null ? _ref91 : '');
+        const order = CommerceModel.liftLegacyOrder((_snapshot_data1 = snapshot.data()) != null ? _snapshot_data1 : {});
+        const orderCents = Number((_ref92 = (_ref93 = (_order_totals2 = order.totals) == null ? void 0 : _order_totals2.totalCents) != null ? _ref93 : order.amountCents) != null ? _ref92 : 0);
         await recordPaymentRiskOnRecord({
             ref: snapshot.ref,
             signal: risk.signal,
             hostId,
             subjectLabel: `order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
+            // The notice names the sum in question, as the dispute's does.
+            amount: orderCents > 0 ? `$${(orderCents / 100).toFixed(2)}` : null,
             // The Orders section of the Products hub, with this order's dialog
             // open — where Refund lives (`siteRecordLinks().order`).
             link: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
@@ -4114,7 +4244,7 @@ async function findOrderForDispute(paymentIntentId) {
     // finds). AGL-1554 will add its own `closed` branch for the marketplace
     // side; the two coexist because each self-selects by finding its own record.
     if (type === 'charge.dispute.created' || type === 'charge.dispute.closed') {
-        var _dispute_payment_intent, _ref86;
+        var _dispute_payment_intent, _ref94;
         var _snapshot_ref_parent_parent2;
         const dispute = object != null ? object : {};
         const paymentIntentId = String((_dispute_payment_intent = dispute.payment_intent) != null ? _dispute_payment_intent : '');
@@ -4140,14 +4270,16 @@ async function findOrderForDispute(paymentIntentId) {
         const claimed = lookup.kind === 'order' || lookup.kind === 'unresolved';
         const snapshot = lookup.kind === 'order' ? lookup.snapshot : null;
         if (snapshot) {
-            var _ref87;
+            var _ref95;
             var _snapshot_ref_parent_parent3;
-            const hostId = String((_ref87 = (_snapshot_ref_parent_parent3 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent3.id) != null ? _ref87 : '');
+            const hostId = String((_ref95 = (_snapshot_ref_parent_parent3 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent3.id) != null ? _ref95 : '');
             if (type === 'charge.dispute.created') {
+                var _snapshot_data2;
                 // A chargeback's gift cards are frozen while it is open (AGL-3363).
+                const disputed = CommerceModel.liftLegacyOrder((_snapshot_data2 = snapshot.data()) != null ? _snapshot_data2 : {});
                 await notifyGiftCardHold({
                     hostId,
-                    orderLabel: `order ${snapshot.id}`,
+                    orderLabel: `order ${CommerceModel.formatOrderNumber(disputed, snapshot.id)}`,
                     orderPath: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
                     orderId: snapshot.id,
                     cards: await applyOrderGiftCardRisk(snapshot, {
@@ -4158,7 +4290,7 @@ async function findOrderForDispute(paymentIntentId) {
                 }, notifyRiskEvent);
                 const { opened, record } = await recordDisputeOpened(snapshot, dispute);
                 if (opened && hostId) {
-                    var _snapshot_data1, _record_evidenceDueByMs, _ref88;
+                    var _snapshot_data3, _record_evidenceDueByMs, _ref96;
                     // Time-critical — Stripe's evidence window is days, not weeks — so
                     // this is awaited rather than fired off with `void`: the handler is
                     // serverless and work left running past the response is work the
@@ -4166,7 +4298,7 @@ async function findOrderForDispute(paymentIntentId) {
                     // (AGL-3368) tells the site's managers and the workspace's owners
                     // what a dispute means and when the evidence is due; it never
                     // throws.
-                    const order = CommerceModel.liftLegacyOrder((_snapshot_data1 = snapshot.data()) != null ? _snapshot_data1 : {});
+                    const order = CommerceModel.liftLegacyOrder((_snapshot_data3 = snapshot.data()) != null ? _snapshot_data3 : {});
                     await notifyRiskEvent({
                         kind: 'sale-dispute',
                         orgId: null,
@@ -4177,16 +4309,16 @@ async function findOrderForDispute(paymentIntentId) {
                         },
                         amount: `$${(record.amountCents / 100).toFixed(2)}`,
                         evidenceDueByMs: (_record_evidenceDueByMs = record.evidenceDueByMs) != null ? _record_evidenceDueByMs : null,
-                        dedupeKey: `sale:${String((_ref88 = dispute == null ? void 0 : dispute.id) != null ? _ref88 : snapshot.id)}`,
+                        dedupeKey: `sale:${String((_ref96 = dispute == null ? void 0 : dispute.id) != null ? _ref96 : snapshot.id)}`,
                         staffEvidence: record.reason ? `Reason: ${record.reason.replace(/_/g, ' ')}.` : null
                     });
                 }
             } else {
-                var _ref89, _ref90;
+                var _ref97, _snapshot_data4, _ref98;
                 // Lost: the money went back, so the cards it bought are voided. Won
                 // (or closed on a warning): the dispute's freeze lifts; a freeze a
                 // fraud warning or review put on stays for the merchant (AGL-3363).
-                await applyOrderGiftCardRisk(snapshot, String((_ref89 = dispute == null ? void 0 : dispute.status) != null ? _ref89 : '') === 'lost' ? {
+                await applyOrderGiftCardRisk(snapshot, String((_ref97 = dispute == null ? void 0 : dispute.status) != null ? _ref97 : '') === 'lost' ? {
                     kind: 'void',
                     reason: 'dispute-lost'
                 } : {
@@ -4194,11 +4326,18 @@ async function findOrderForDispute(paymentIntentId) {
                     reason: 'dispute'
                 });
                 const settled = await recordDisputeClosed(snapshot, dispute);
+                // The number the merchant knows the order by (AGL-3432), for both
+                // notices below; the Stripe session id is nowhere in the console.
+                const disputedOrderLabel = CommerceModel.formatOrderNumber(CommerceModel.liftLegacyOrder((_snapshot_data4 = snapshot.data()) != null ? _snapshot_data4 : {}), snapshot.id);
                 if (settled.recorded && hostId) {
+                    // What the shopper's bank took back left the PLATFORM's balance on
+                    // a destination charge, not the merchant's: their own loss is the
+                    // seller share in the "Payout adjusted" notice below. Told that way
+                    // (AGL-3432), so the two are not read as two losses.
                     await notifyHostManagers(hostId, {
                         type: 'content.order',
-                        title: settled.lost ? `Chargeback lost — $${(settled.reversedCents / 100).toFixed(2)} reversed` : 'Chargeback resolved in your favor',
-                        body: `Order ${snapshot.id}`,
+                        title: settled.lost ? `Chargeback lost — order ${disputedOrderLabel}` : 'Chargeback resolved in your favor',
+                        body: settled.lost ? `The chargeback on order ${disputedOrderLabel} on {site} was ` + 'decided in the shopper\'s favor, and their bank took back ' + `$${(settled.reversedCents / 100).toFixed(2)}. If part of the ` + 'sale had been paid out to you, a separate notice says what ' + 'is taken back from your balance.' : `The chargeback on order ${disputedOrderLabel} on {site} ` + 'closed in your favor. Nothing is taken back from you for it.',
                         link: `/${hostId}/orders`
                     });
                     // The customer's side of the ledger (AGL-1754), through the same
@@ -4250,7 +4389,7 @@ async function findOrderForDispute(paymentIntentId) {
                 // transiently-failed reversal gets its retry — and gated inside on
                 // the order's own `reversedTransferCents` marker, so it runs at most
                 // once per dispute however many times Stripe delivers.
-                if (String((_ref90 = dispute == null ? void 0 : dispute.status) != null ? _ref90 : '') === 'lost') {
+                if (String((_ref98 = dispute == null ? void 0 : dispute.status) != null ? _ref98 : '') === 'lost') {
                     const pulledBackCents = await reverseSellerShare(snapshot.ref, dispute);
                     // The merchant-experience half of the AGL-1794 decision, and not an
                     // optional extra: the reversal takes money out of the connected
@@ -4270,7 +4409,7 @@ async function findOrderForDispute(paymentIntentId) {
                         await notifyHostManagers(hostId, {
                             type: 'content.order',
                             title: `Payout adjusted — $${(pulledBackCents / 100).toFixed(2)} recovered for a lost chargeback`,
-                            body: `Order ${snapshot.id}: the amount transferred to you for this sale has been ` + `reversed. If your balance does not cover it, Stripe recovers the remainder ` + `from your future payouts.`,
+                            body: `Because the chargeback on order ${disputedOrderLabel} on ` + `{site} was lost, the $${(pulledBackCents / 100).toFixed(2)} ` + 'transferred to you for that sale has been taken back. If ' + 'your balance does not cover it, Stripe recovers the rest ' + 'from your future payouts.',
                             link: `/${hostId}/orders`
                         });
                     }
@@ -4280,7 +4419,7 @@ async function findOrderForDispute(paymentIntentId) {
         return _extends({
             claimed
         }, snapshot ? {
-            hostId: String((_ref86 = (_snapshot_ref_parent_parent2 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent2.id) != null ? _ref86 : '')
+            hostId: String((_ref94 = (_snapshot_ref_parent_parent2 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent2.id) != null ? _ref94 : '')
         } : {});
     }
 };